{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/bluenoroffs-ghostcall-and-ghosthire-campaigns-use-stolen-victim-videos-to-compromise-crypto-executives/",
    "fang": "live",
    "exported_at": "2026-08-27T00:00:00Z",
    "total": 147,
    "categories": 5,
    "migration_policy": "typed-only-better-v2"
  },
  "iocs": {
    "IPv4": [
      "104.168.214.151"
    ],
    "Domains": [
      "alwayswait.site",
      "autoupdate.online",
      "autoupdate.xyz",
      "awaitingfor.online",
      "awaitingfor.site",
      "backdoor.python.agent.br",
      "bots.autoupdate.online",
      "botsc.autoupdate.xyz",
      "check.datatabletemplate.shop",
      "chkactive.online",
      "chkstate.online",
      "cloud-server.store",
      "commoncome.online",
      "crypto.com",
      "datatabletemplate.shop",
      "datatabletemplate.xyz",
      "dataupload.store",
      "download.datatabletemplate.xyz",
      "download.face-online.world",
      "face-online.world",
      "file-server.store",
      "filedrive.online",
      "first.longlastfor.online",
      "first.system-update.xyz",
      "firstfromsep.online",
      "flashserve.store",
      "image-support.xyz",
      "instant-update.online",
      "longlastfor.online",
      "metamask.awaitingfor.site",
      "ms-live.us",
      "pre.alwayswait.site",
      "readysafe.xyz",
      "real-update.xyz",
      "root.chkstate.online",
      "root.security-update.xyz",
      "safefor.xyz",
      "safeup.store",
      "safeupload.online",
      "second.awaitingfor.online",
      "second.systemupdate.cloud",
      "secondshop.online",
      "secondshop.store",
      "security-update.xyz",
      "signsafe.site",
      "signsafe.xyz",
      "support.ms",
      "support.ms-live.us",
      "support.video-meeting.online",
      "swissborg.blog",
      "system-update.xyz",
      "system.updatecheck.store",
      "systemupdate.cloud",
      "trojan.shell.agent.gn",
      "updatecheck.store",
      "urgent-update.cloud",
      "us.zoom.com",
      "video-meeting.online",
      "web.commoncome.online",
      "web071zoom.us",
      "writeup.live",
      "zoom.app"
    ],
    "URLs": [
      "http://web071zoom.us/fix/audio-fv/7217417464",
      "http://web071zoom.us/fix/audio-tr/7217417464",
      "http://web071zoom.us/fix/audio/4542828056",
      "https://bots.autoupdate.online:8080/test",
      "https://chkactive.online/update",
      "https://cloud-server.store/update",
      "https://dataupload.store/uploadfiles",
      "https://download.datatabletemplate.xyz/account/register/id=8118555902061899&secret=QwLoOZSDakFh",
      "https://file-server.store/update",
      "https://filedrive.online/uploadfiles",
      "https://flashserve.store/update",
      "https://metamask.awaitingfor.site/update",
      "https://safeup.store/test",
      "https://safeupload.online/uploadfiles",
      "https://support.ms-live.us/301631/check",
      "https://support.ms-live.us/register/22989524464UcX2b5w52",
      "https://support.ms-live.us/update/02583235891M49FYUN57",
      "https://urgent-update.cloud/uploadfiles",
      "https://writeup.live/test"
    ],
    "md5": [
      "00dd47af3db45548d2722fe8a4489508",
      "01d3ed1c228f09d8e56bfbc5f5622a6c",
      "0af11f610da1f691e43173d44643283f",
      "0ca37675d75af0e7def0025cd564d6c5",
      "10cd1ef394bc2a2d8d8f2558b73ac7b8",
      "1243968876262c3ad4250e1371447b23",
      "1653d75d579872fadec1f22cf7fee3c0",
      "17baae144d383e4dc32f1bf69700e587",
      "19a7e16332a6860b65e6944f1f3c5001",
      "1ee10fa01587cec51f455ceec779a160",
      "261a409946b6b4d9ce706242a76134e3",
      "2b499eb3865a7ef17264d15252b7f73e",
      "2c42253ebf9a743814b9b16a89522bef",
      "31b88dd319af8e4b8a96fc9732ebc708",
      "358c2969041c8be74ce478edb2ffcd19",
      "389447013870120775556bb4519dba97",
      "38c8d80dd32d00e9c9440a498f7dd739",
      "3bbe4dfe3134c8a7928d10c948e20bee",
      "50f341b24cb75f37d042d1e5f9e3e5aa",
      "529fe6eff1cf452680976087e2250c02",
      "5ad40a5fd18a1b57b69c44bc2963dc6b",
      "5cb4f0084f3c25e640952753ed5b25d0",
      "60bfe4f378e9f5a84183ac505a032228",
      "6348b49f3499d760797247b94385fda3",
      "6422795a6df10c45c1006f92d686ee7e",
      "6aa93664b4852cb5bad84ba1a187f645",
      "7168ce5c6e5545a5b389db09c90038da",
      "73d26eb56e5a3426884733c104c3f625",
      "7581854ff6c890684823f3aed03c210f",
      "76ace3a6892c25512b17ed42ac2ebd05",
      "7e50c3f301dd045eb189ba1644ded155",
      "7f94ed2d5f566c12de5ebe4b5e3d8aa3",
      "8006efb8dd703073197e5a27682b35bf",
      "8f8942cd14f646f59729f83cbd4c357b",
      "931cec3c80c78d233e3602a042a2e71b",
      "9551b4af789b2db563f9452eaf46b6aa",
      "963f473f1734d8b3fbb8c9a227c06d07",
      "a070b77c5028d7a5d2895f1c9d35016f",
      "a0eb7e480752d494709c63aa35ccf36c",
      "a26f2b97ca4e2b4b5d58933900f02131",
      "a6ce961f487b4cbdfe68d0a249647c48",
      "ab1e8693931f8c694247d96cf5a85197",
      "b2e9a6412fd7c068a5d7c38d0afd946f",
      "b567bfdaac131a2d8a23ad8fd450a31d",
      "c42c7a2ea1c2f00dddb0cc4c8bfb5bcf",
      "c446682f33641cff21083ac2ce477dbe",
      "c6f0c8d41b9ad4f079161548d2435d80",
      "d63805e89053716b6ab93ce6decf8450",
      "d8529855fab4b4aa6c2b34449cb3b9fb",
      "de93e85199240de761a8ba0a56f0088d",
      "e33f942cf1479ca8530a916868bad954",
      "e8680d17fba6425e4a9bb552fb8db2b1",
      "e9fdd703e60b31eb803b1b59985cabec",
      "eda0525c078f5a216a977bc64e86160a",
      "f1bad0efbd3bd5a4202fe740756f977a",
      "f1d2af27b13cd3424556b18dfd3cf83f",
      "f8bb2528bf35f8c11fbc4369e68c4038"
    ],
    "sha256": [
      "3dd226d0b700f33974f409142defb62a8cd172ae5f2eb9beb7f5750eb1702e2a",
      "4451ee8bc53ea7c148d8348bc7b82aca9977bdd31c0156dfe25c4a879a1d2190",
      "5b77f83ecefa0e32ba922f61c9efff7f755ba51a010db844ca7e8ad3db28650a",
      "71b743c529f0b27735f7774a0903cb908edc93423b60fe9be49a3729982d0e8d",
      "a6c1a7ce43b029a1ef4ae69b26f745440ecce8368c89f11ac999d4ed04a31572",
      "b3cc15c1033de79024f9cf3cd6a6a7a9b7e54a1a57d3156036f5c05f541694b7",
      "b494a0ae421afe170f6cb9de2c1193a78fbe16f627f85139676afc5d9bfe93a2",
      "c4db903322d17c8cbf1d1db55124854c0b070d6ece54162b6a4d06df24c572df"
    ]
  }
}