{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/jadeprox-triback-loader-china-nexus-exposure-defense/",
    "fang": "live",
    "exported_at": "2026-07-23T15:04:00Z",
    "total": 72,
    "categories": 6
  },
  "iocs": {
    "IPv4": [
      "104.21.60.96",
      "140.0.0.0",
      "161.35.236.255",
      "178.128.108.89",
      "192.252.186.62",
      "43.106.71.28",
      "8.217.190.58"
    ],
    "Domains": [
      "claude-pro.com",
      "dlrz-web.oss-cn-beijing.aliyuncs.com",
      "edu.hk",
      "gouvvbo.top",
      "license.claude-pro.com",
      "photo.pokok.edu.hk",
      "pta.sfaeps.edu.hk",
      "sylverixstrategy.com",
      "update-crowdstrike.com",
      "update-sentinelone.com",
      "update-trellix.com",
      "vertextrust-advisors.com"
    ],
    "URLs": [
      "aliyuncs.com",
      "claude-pro.com",
      "gouvvbo.top",
      "license.claude-pro.com",
      "pokok.edu.hk",
      "sfaeps.edu.hk",
      "sylverixstrategy.com",
      "update-crowdstrike.com",
      "update-sentinelone.com",
      "update-trellix.com",
      "vertextrust-advisors.com"
    ],
    "md5": [
      "0482d6053f96e6bde0a92af25497f3c0",
      "0e6d22c2a81d29b1f9d8395d44e19e53",
      "35cdbf8a16da1245d574a0365cb87287",
      "38e317af0fc0efcc88265f243a264542",
      "39d4012e49f58092ec5cefed13dbbcfd",
      "3b3dd8f3a5e1ff85c63f2453ad270415",
      "3fe9c84025f4401f8cd661675642c526",
      "4faf4fd91d28e014b4f2362d6a7bb8ac",
      "5222a31cf24f9f57ae3d1831f264a983",
      "5b75b00a4b4c32b6e213514e80500a65",
      "7840f30b395fac347f85b38633c2d08d",
      "796f82a4833be330b1e35af63e55b597",
      "7c84e75817349adcdea9925b86f67670",
      "8002ab4d0cf7e1888ee72de0b9f4282c",
      "853f760f76de3201b0af0e41f1f65fba",
      "88ac1c5fc9ee89491c70ea16131e264a",
      "9e01bf0e28c86435cfb1afaef44238e9",
      "a4cdecc57a215243d279cdb065863308",
      "aedd185b76ccda8d65dbd26204cc0e9a",
      "b8053bcd04ce9d7d19c7f36830a9f26b",
      "bb5c88de9e04e6306260b9f3a4498933",
      "bef0b8599d18acf1c74192ae9f198f85",
      "c1f45a0609c5c1bd2c21cad20703f126",
      "c512adfa8743c3b3c776d4452f00c6c0",
      "c64eda499e2a21ad158841b9dbc7adc9",
      "d99392248bdd7e351e63ead6733638ba",
      "df1f03a2534480a4838f62339bcb90d8",
      "e067ffea77875ae0dc13d4ce045931d3",
      "ee5a2cdd4ce6ccb2e9279c9e13e8bd15",
      "efac43473d7e87ede5176fe01a114abb",
      "f2ce6fe8b52dfbacfee482a48f4ae972",
      "f360afe51b499a036c7be8c0ecc4dc89",
      "fef1d3cb35129ad25d95e279565b9001"
    ],
    "CVEs": [
      "CVE-2018-11511",
      "CVE-2021-24139",
      "CVE-2021-31755",
      "CVE-2021-32305"
    ],
    "Bitcoin Addresses": [
      "35cdbf8a16da1245d574a0365cb87287",
      "38e317af0fc0efcc88265f243a264542",
      "39d4012e49f58092ec5cefed13dbbcfd",
      "3b3dd8f3a5e1ff85c63f2453ad270415",
      "3fe9c84025f4401f8cd661675642c526"
    ]
  }
}