{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/fake-7-zip-downloads-convert-home-pcs-into-residential-proxy-nodes-for-cybercriminals/",
    "fang": "live",
    "exported_at": "2026-08-27T00:00:00Z",
    "total": 35,
    "categories": 4,
    "migration_policy": "typed-only-better-v2"
  },
  "iocs": {
    "IPv4": [
      "1.0.0.2",
      "104.21.57.71",
      "172.67.160.241"
    ],
    "Domains": [
      "7-zip.org",
      "7zip.com",
      "apex.herosms.ai",
      "flux.smshero.co",
      "glide.smshero.cc",
      "hero-sms.ai",
      "hero-sms.co",
      "herosms.ai",
      "herosms.cc",
      "herosms.co",
      "herosms.io",
      "herosms.vip",
      "iplogger.org",
      "mint.smshero.com",
      "neo.herosms.co",
      "nova.smshero.ai",
      "prime.herosms.vip",
      "pulse.herosms.cc",
      "smshero.ai",
      "smshero.cc",
      "smshero.co",
      "smshero.com",
      "smshero.vip",
      "soc.hero-sms.co",
      "spark.herosms.io",
      "update.7zip.com",
      "vivid.smshero.vip",
      "zest.hero-sms.ai"
    ],
    "sha256": [
      "3544ffefb2a38bf4faf6181aa4374f4c186d3c2a7b9b059244b65dce8d5688d9",
      "b7a7013b951c3cea178ece3363e3dd06626b9b98ee27ebfd7c161d0bbcfbd894",
      "e7291095de78484039fdc82106d191bf41b7469811c4e31b4228227911d25027"
    ],
    "Mutex Names": [
      "Global\\3a886eb8-fe40-4d0a-b78b-9e0bcb683fb7"
    ]
  }
}