{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/tag150-clickfix-denorat-runtime-abuse-defense/",
    "fang": "live",
    "exported_at": "2026-07-26T15:10:39Z",
    "total": 35,
    "categories": 4
  },
  "iocs": {
    "Domains": [
      "Obfuscator.io",
      "cktdpnuwztdn.columbnezhjdq.com",
      "columbnezhjdq.com",
      "smallsmokik.com",
      "webstizkgao.com",
      "www.esentire.com"
    ],
    "URLs": [
      "cktdpnuwztdn.columbnezhjdq.com",
      "columbnezhjdq.com",
      "http://webstizkgao.com",
      "http://webstizkgao.com/health",
      "http://webstizkgao.com/message-event",
      "http://webstizkgao.com/user",
      "https://cktdpnuwztdn.columbnezhjdq.com",
      "https://www.esentire.com/blog/new-botnet-emerges-from-the-shadows-nightshadec2",
      "smallsmokik.com",
      "webstizkgao.com",
      "webstizkgao.com/health",
      "webstizkgao.com/message-event",
      "webstizkgao.com/user"
    ],
    "sha256": [
      "1f233db3e59051811e16c65e32121f69dd80e91567002978e47a613a5a4903b0",
      "2e9812a0dc5998a3f9a59fe64193884a67dadac05171494ffd2b81a711eb1359",
      "3dffe05d9cc49b2598d743301a8991965056d97bb8d429de461ed66c0dbde28b",
      "4ac3e1ecd2c4745f2e846ec7655b92234ee92068bffc7690c3f0184dc25c71da",
      "6103228087aaee53f37db88ab7aa1e7e5dd8c27a395bef7e3af985774a888c94",
      "7682e9ac86ff47cc198812719ca54e169c3cb21ce584ad2a278a640f4833de46",
      "a06d514a34d2ab08c3a13a58056827c50ba9bf01b68ca4b2cecb4e1462af53fa",
      "b4fd836b82f2d8daf8b90a95046987e993e5687707fc57b527a8145d865e3fdc",
      "c1e0a0543b12c64726f8bb36389010d7f35e57993a22ce5b73c56b9cc2a87a00",
      "c2cdf1ecd6684bbcef0405444a570a76e9589bbd563476b08788bde34d83b511",
      "e0dd60bb3a409029988db6a10cb1e36586c2636da9eff3a3587bc38473fde54b",
      "ece42baaca7524460cc5ffc9ae94c2a634a67610decdd2bdc8f134c36fa2dd6c",
      "fa0d1adb545881a2d8a508191961a9fd39485c4ac2a0f20ad8e2f931dc45c9ef"
    ],
    "CVEs": [
      "CVE-2026-15409",
      "CVE-2026-15410",
      "CVE-2026-8451"
    ]
  }
}