{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/android-malware-campaign-abuses-hugging-face-ai-platform-to-distribute-rat/",
    "fang": "live",
    "exported_at": "2026-07-15T22:30:06Z",
    "total": 31,
    "categories": 7
  },
  "iocs": {
    "IPv4": [
      "108.187.7.133",
      "143.204.11.112",
      "148.135.44.146",
      "154.198.48.57"
    ],
    "Domains": [
      "au-club.top",
      "cdn-lfs-us-1.hf.co",
      "huggingface.co",
      "trustbastion.com",
      "www.trustbastion.com"
    ],
    "URLs": [
      "au-club.top",
      "hf.co/r",
      "hf.co/repos/a5/0c/a50cf45d8b119af0cc75679c8307b05e29f2bc85b6d0bd55999dd018639f1c72/19f1a6b9ad1a9654e7c78fa2d37a3ec10192b01b636c5fc1995b80bf6f7dcb36?response-content-disposition=attachment%3B+filename*%3DUTF-8%27%27b.apk%3B+filename%3D%22b.apk%22%3B&amp",
      "https://cdn-lfs-us-1.hf.co/r",
      "https://cdn-lfs-us-1.hf.co/repos/a5/0c/a50cf45d8b119af0cc75679c8307b05e29f2bc85b6d0bd55999dd018639f1c72/19f1a6b9ad1a9654e7c78fa2d37a3ec10192b01b636c5fc1995b80bf6f7dcb36?response-content-disposition=attachment%3B+filename*%3DUTF-8%27%27b.apk%3B+filename%3D%22b.apk%22%3B&response-content-type=application%2Fvnd.android.package-archive&Expires=1764089304&Policy=eyJTdGF0ZW1lbnQiOlt7IkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTc2NDA4OTMwNH19LCJSZXNvdXJjZSI6Imh0dHBzOi8vY2RuLWxmcy11cy0xLmhmLmNvL3JlcG9zL2E1LzBjL2E1MGNmNDVkOGIxMTlhZjBjYzc1Njc5YzgzMDdiMDVlMjlmMmJjODViNmQwYmQ1NTk5OWRkMDE4NjM5ZjFjNzIvMTlmMWE2YjlhZDFhOTY1NGU3Yzc4ZmEyZDM3YTNlYzEwMTkyYjAxYjYzNmM1ZmMxOTk1YjgwYmY2ZjdkY2IzNj9yZXNwb25zZS1jb250ZW50LWRpc3Bvc2l0aW9uPSomcmVzcG9uc2UtY29udGVudC10eXBlPSoifV19&Signature=Mqc2vLuG17L9PD9eOO96Tbl8S1P6Efgzc1c%7EvjGQqg7jE6NcLyKqkIn7Koq06ybpChfuNeUOUSIRvqUXUd%7EAUt1mvivbp8cZla5frbYSx6ce2-Enp7KmhKXafgpPH6Hr8sGEt8EO56g3oF867bsCO3qH4Q9HqcX6DZZfgyysDxK22VIzEOYCoGqzIa0pj1gFr57PGdcyQJxqFDvpQ9KiCoLxqGjf4O5EpO-4bLJ53D3nZUTrDZX3sCHo7hUOxwqBMUefhgL0BKhL4JPfaBsHyfM9Cj%7EO1yPsf6CqZd%7EVfQWh9CH6ZW834YlKppFxovUMdg3dUHxUNUBDZg2-Nf3plw__&Key-Pair-Id=K24J24Z295AEI9",
      "https://huggingface.co",
      "https://huggingface.co/datasets/xcvqsccm/sfxyt851/resolve/main/b.apk?download=true",
      "https://www.trustbastion.com/xiazz.html",
      "huggingface.co",
      "huggingface.co/datasets/xcvqsccm/sfxyt851/resolve/main/b.apk?download=true",
      "trustbastion.com",
      "trustbastion.com/xiazz.html"
    ],
    "md5": [
      "15bdc66aca9fb7290165d460e6a993a9",
      "b62c906078644edd3439e2d986abd2e2",
      "b716a8a742fec3084b0f497abbfecfc0",
      "d184d705189e42b54c6243a55d6c9502",
      "d8b0fd515d860be2969cf441ea3b620d",
      "fc874c42ea76dd5f867649cbdf81e39b"
    ],
    "sha1": [
      "bdf3779ddc10f241603be57a90865b680cde8c31"
    ],
    "sha256": [
      "19f1a6b9ad1a9654e7c78fa2d37a3ec10192b01b636c5fc1995b80bf6f7dcb36",
      "a50cf45d8b119af0cc75679c8307b05e29f2bc85b6d0bd55999dd018639f1c72"
    ],
    "Bitcoin Addresses": [
      "15bdc66aca9fb7290165d460e6a993a9"
    ]
  }
}