{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/gremlin-stealer-browser-session-resource-obfuscation/",
    "fang": "live",
    "exported_at": "2026-07-15T22:31:39Z",
    "total": 19,
    "categories": 4
  },
  "iocs": {
    "IPv4": [
      "194.87.92.109"
    ],
    "Domains": [
      "api.ipify.org",
      "api.telegram.org",
      "telegram.org"
    ],
    "URLs": [
      "api.telegram.org",
      "http://api.ipify.org/?format=json",
      "https://api.telegram.org",
      "ipify.org"
    ],
    "sha256": [
      "1bd0a200528c82c6488b4f48dd6dbc818d48782a2e25ccd22781c5718c3f62f5",
      "2172dae9a5a695e00e0e4609e7db0207d8566d225f7e815fada246ae995c0f9b",
      "281b970f281dbea3c0e8cfc68b2e9939b253e5d3de52265b454d8f0f578768a2",
      "691896c7be87e47f3e9ae914d76caaf026aaad0a1034e9f396c2354245215dc3",
      "971198ff86aeb42739ba9381923d0bc6f847a91553ec57ea6bae5becf80f8759",
      "9aab30a3190301016c79f8a7f8edf45ec088ceecad39926cfcf3418145f3d614",
      "9fda1ddb1acf8dd3685ec31b0b07110855832e3bed28a0f3b81c57fe7fe3ac20",
      "a9f529a5cbc1f3ee80f785b22e0c472953e6cb226952218aecc7ab07ca328abd",
      "ab0fa760bd037a95c4dee431e649e0db860f7cdad6428895b9a399b6991bf3cd",
      "d11938f14499de03d6a02b5e158782afd903460576e9227e0a15d960a2e9c02c",
      "f76ba1a4650d8cafb6d3ff071688c5db6fd37e165050f03cece693826f51d346"
    ]
  }
}