{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/strikeshark-sharkloader-cobalt-strike-defense/",
    "fang": "live",
    "exported_at": "2026-08-27T00:00:00Z",
    "total": 26,
    "categories": 3,
    "migration_policy": "typed-only-better-v2"
  },
  "iocs": {
    "Domains": [
      "connect-microsoft.com",
      "ms-record.com",
      "ms-record.top",
      "ms-tray.top"
    ],
    "md5": [
      "1f65544978b8ea0e745e573b8ee9684b",
      "24fcebdeecba65004fdb0923763d74fd",
      "9c872a0d5d5a38950e8b9ac9b488be3f",
      "9cbd560f820c95d7c38342cd558cb5c6",
      "a514d1bb62d7916475946fe7c07ac0aa",
      "aa3086be652c8b20b0b29b2730d57119",
      "b3352b42432dedc4a519f011dc8b5d5a",
      "c559cc68986933200fd5d9e4388e2f58",
      "d98f568496512e4f98670c61c97cb07a"
    ],
    "CVEs": [
      "CVE-2016-4437",
      "CVE-2021-26855",
      "CVE-2021-27076",
      "CVE-2021-36260",
      "CVE-2022-27925",
      "CVE-2022-40684",
      "CVE-2022-41082",
      "CVE-2023-20198",
      "CVE-2023-32315",
      "CVE-2023-46747",
      "CVE-2024-21762",
      "CVE-2024-36401",
      "CVE-2025-55182"
    ]
  }
}