# Bulwark Black - extracted indicators
# LIVE indicators

## Domains (9)
ci.appveyor.com
community.spiceworks.com
export.name
interoperability.blob.core.windows.net
osandamalith.com
redmaple.tech
section.name
www.garykessler.net
www.tarlogic.com

## URLs (7)
https://ci.appveyor.com/project/plusvic/yara/build/job/wthlb30bklmlns0a/artifacts
https://community.spiceworks.com/topic/2107142-what-are-all-of-the-file-types-on-a-windows-pc-that-contain-executable-code
https://interoperability.blob.core.windows.net/files/MS-ONE/%5bMS-ONE%5d.pdf
https://osandamalith.com/2020/07/19/exploring-the-ms-dos-stub/
https://redmaple.tech/blogs/macho-files/
https://www.garykessler.net/library/file_sigs.html
https://www.tarlogic.com/blog/seloaddriverprivilege-privilege-escalation/

## md5 (6)
269af2751efee65b1ab00622816c83e6
30851d4a2b31e9699084a06e765e21b0
4f6b9c644d4fe517889b3fbb0b4271ca
72f60d7f4ce22db4506547ad555ea0b1
c0de41e45352714500771d43f0d8c4c3
f34d5f2d4577ed6d9ceec516c1f5a744

## sha1 (2)
05ef26965be930fade49e5dcba73b9fefc04757e
2b631d0ee47650923955398921c1ceccc3e38cb1

## sha256 (12)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## Bitcoin Addresses (1)
30851d4a2b31e9699084a06e765e21b0