{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/forticlient-ems-ekz-infostealer-delivery/",
    "fang": "live",
    "exported_at": "2026-07-15T22:31:24Z",
    "total": 16,
    "categories": 7
  },
  "iocs": {
    "IPv4": [
      "185.220.101.15",
      "192.42.116.14",
      "83.138.53.110"
    ],
    "URLs": [
      "http://83.138.53.110/dl/p.exe",
      "http://83.138.53.110/service/save.php"
    ],
    "md5": [
      "338662fd0c4d750a0ba203a32b59f081",
      "8c5b72906e8183037532afc3f4639931"
    ],
    "sha1": [
      "17e771c78430cc67e71d4547f8996a1a488e9d3f"
    ],
    "sha256": [
      "0da123adf9251957a4b850a3f6bd6a753dd4892be176a84a18450e899534cc5e",
      "2927bc31b4f8254c6b332fc03110a6373cad00ffa2ff9de427c26bb222017bb2",
      "2f25ea1b622abf3212141af932c2ec4cbd6b2b5903c2a531121f691227d98cff",
      "d91c00fad521e76efa89715cca89db487d5676f2c767c883482f9c8f82bd383a",
      "fd65051c61a904a304919c04a8c8633c001183ac73ac461cd4d9057946f02bf5"
    ],
    "CVEs": [
      "CVE-2026-35616",
      "CVE-2026-48558"
    ],
    "Bitcoin Addresses": [
      "338662fd0c4d750a0ba203a32b59f081"
    ]
  }
}