{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/cikabika-discord-rat-document-lure-defense/",
    "fang": "live",
    "exported_at": "2026-10-18T20:03:26Z",
    "total": 23,
    "categories": 5
  },
  "iocs": {
    "IPv4": [
      "138.124.123.87",
      "192.229.115.229",
      "195.242.214.34",
      "77.110.127.205"
    ],
    "Domains": [
      "bduwih8.pro",
      "citcix6.xyz",
      "donate.ssl.xmrig.com",
      "google.services.ug",
      "haveibeensquatted.com",
      "hf98x4d.site",
      "ipify.com",
      "onedrive.cv",
      "polygon.drpc.org",
      "pool.hashvault.pro",
      "release-assets.githubusercontent.com",
      "sj98xe4.xyz"
    ],
    "URLs": [
      "http://onedrive.cv/Downloads/CURP/ReportFinal.%E2%80%AE%E1%BA%9D%D4%81%EF%BD%90.scr",
      "https://haveibeensquatted.com/blog/from-typosquatting-to-macos-backdoor-clickfix-blockchain-c2"
    ],
    "md5": [
      "2deb724a709b0b892248405323350e9b",
      "62e3e85eca78a0cd7e6669e9f33d936d",
      "c66858718d883bcfb9ce2c19b59f96c9",
      "eeb52cb95113a131c2c7713c17872da6"
    ],
    "sha256": [
      "b0e5c51a411065864119c305fddf218b7c120731f655932cc1c3307ad5b43f94"
    ]
  }
}