{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/cl-sta-1062-tinyrct-critical-infrastructure-web-shell-defense/",
    "fang": "live",
    "exported_at": "2026-07-15T22:30:44Z",
    "total": 17,
    "categories": 3
  },
  "iocs": {
    "IPv4": [
      "139.180.134.221",
      "202.182.102.5",
      "45.32.113.172",
      "45.76.210.43"
    ],
    "URLs": [
      "http://139.180.134.221/PerfWatson2.exe",
      "http://139.180.134.221/sdksdk608/1.zip",
      "http://139.180.134.221/sdksdk608/anydesk%5f0117.zip",
      "http://139.180.134.221/sdksdk608/hamcore.se2",
      "http://139.180.134.221/sdksdk608/httpdf",
      "http://139.180.134.221/sdksdk608/vpn%5fbridge.config",
      "http://139.180.134.221/sdksdk608/win-vpn.rar"
    ],
    "sha256": [
      "00e09754526d0fe836ba27e3144ae161b0ecd3774abec5560504a16a67f0087c",
      "4e1f8888d020decd09799ec946f1bf677cac6612b24582ddbf4d8ede425d8384",
      "9b481b69cd91b09fa7bae7428f646dd89473a4c03393e43da81fe756cde1c472",
      "cbfe8de6ffadbb1d396f61e63eb18e8b11c29527c1528641e3223d4c516cf7c3",
      "dce5df29bddff5a4ddaea5c4fec14da91f7b69063a6e1c45ed61e5da4fc6c87b",
      "f34bd1d485de437fe18360d1e850c3fd64415e49d691e610711d8d232071a0b1"
    ]
  }
}