{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/macsync-macos-stealer-backdoor-defense/",
    "fang": "live",
    "exported_at": "2026-09-28T01:07:10Z",
    "total": 55,
    "categories": 4
  },
  "iocs": {
    "Domains": [
      "apple03cloudstore.com",
      "caldav.icloud.com",
      "com.mx",
      "docsend.appstore.com.mx",
      "gateway.icloud.com",
      "slack.apple03cloudstore.com",
      "streamyard.appstore.com.mx",
      "toria.app",
      "toria.apple03cloudstore.com",
      "waaako.appstore.com.mx",
      "warpcast.asia"
    ],
    "URLs": [
      "http://caldav.icloud.com/published/2/MTk1NDMwMDMzNTUxOTU0M1aHCZ-nMxiyGzBTzPiodOf44DtKJ6PpjftAG28_ui2NCYMpL_vu4pF4ddsJ8ysg0QI7pR0VEIEbZYdilVZRw08",
      "https://caldav.icloud.com/published/2/MTk1NDMwMDMzNTUxOTU0M1aHCZ-nMxiyGzBTzPiodOf44DtKJ6PpjftAG28_ui2NCYMpL_vu4pF4ddsJ8ysg0QI7pR0VEIEbZYdilVZRw08",
      "https://docsend.appstore.com.mx",
      "https://docsend.appstore.com.mx/dcc737d157ef4271/CoreUpdate.pkg.enc",
      "https://docsend.appstore.com.mx/dcc737d157ef4271/Helper.pkg.enc",
      "https://docsend.appstore.com.mx/dcc737d157ef4271/stage2.enc",
      "https://gateway.icloud.com/caldav/1_MTk1NDMwMDMzNTUxOTU0M0pybtJB186GzhogprwCQUjY3oZNiDFHH8WVo6bmgUtI/attach/4GE4TKNBTGAYDGMZVGUYTSNJUGOAALDAFMDOJBGWNUCYJLZRNDCLCO2YMQ3I64RLGMNXVG3KYBPWQOGYIEI7MPBDDYHECFDYVENTXIYFNDCPOVRMCTYI236RCYZAE63V5U3RTUYGUMO2CO7PKCLWMCXE73M7OPTHSGRWH5DXQ4PCUQU4ELZTLW54JSTK2H7VQ6PD26WOA2R7PPIQ6RTJWDEWP34U3HB4YWMXXC6EJ6PKWILSPYRSDEVY6QGMWSIUN6PR5W35KO3D4QZE7CFPUVBAEKI/Loader.app.tar.gz/YXR0YWNoYXR0YWNoYXR0YRhrE8mQ0E-b_dTUSGStQgTQ0ULFxCanei3Ke-EuEyQL",
      "https://slack.apple03cloudstore.com/installer.sh",
      "https://streamyard.appstore.com.mx/installer.sh",
      "https://toria.app/",
      "https://toria.apple03cloudstore.com",
      "https://toria.apple03cloudstore.com/",
      "https://toria.apple03cloudstore.com/e3c1a6b00bc31e14/stage2.enc",
      "https://waaako.appstore.com.mx/installer.sh",
      "https://warpcast.asia/Toria.dmg"
    ],
    "md5": [
      "00d12d842596bf5ee1805effb4571d30",
      "09425f72de8bba18893dcd6f04115891",
      "26a0f7cdb9f7dc5ace9a40af825b1538",
      "2d69812584269699fade26622e6490c5",
      "3a1af2b397c6958e6c3ba3c75912d60e",
      "3ded1d71a822b53b12c3b67bcaf633f5",
      "3deeed48fd38f22e369f5c3092bd68a1",
      "4203ec932bfcc0907f91732440d6d997",
      "6791dad263cac6d63ebba6a4b57e7d71",
      "7212229c85852c3bffaf9740002b2f39",
      "781ce50001d4b449600afa347c9b0208",
      "7df1049cbd56c0bfa4a3364a379b4c2c",
      "8d371f8a7a6dcc2655544ae13cbca03d",
      "8dc8561349d144d4661bc66f2ec49f9f",
      "8e84b01d5ac9624f0b181ade0e737193",
      "980e2134679bc0c609f7659882883d77",
      "9a0043d900a9ac78c886c59c9a328fd0",
      "9f15fe9c4415cd668334339f705b94d8",
      "c53d0ea45dbc622afb7f16ea3eec78bc",
      "eb760d5c88f13f7ee0f8f86ba3407123",
      "f97d24212fa6a21be0c4d211e10f044c",
      "f9f70096aabb4d22a6657014f4853a53",
      "fb90887592655a8c989e443c640167aa",
      "fc3ba5ed282d77127efd0b0f2403531b"
    ],
    "sha256": [
      "3744f975113dfc552df982dcae699f9154a448e05a743bdfb641a463352bc13a",
      "b8b4b88205a8f594b95a841bc37342898f34cad8a5a9e4a22ce69a31a1208650",
      "cb09ff86cabde4f8cee2d3cdec370c623bfa6c2b72ae9750fc9a7b299c65d7ca",
      "ff3ab9ef841630364818396f62e696b72aed162cf0b895b6643ef25dad79b51d",
      "ff664112d3215c5d184689fc836e0dc6c1a47e42c34e70b2c3d356864bc4cb4c"
    ]
  }
}