{
  "Event": {
    "analysis": "1",
    "date": "2026-03-17",
    "extends_uuid": "",
    "info": "[Threat Intel] Contagious Trader campaign - Coordinated weaponisation of cryptocurrency trading bots by suspected DPRK malware operators",
    "protected": false,
    "publish_timestamp": "1775231562",
    "published": true,
    "threat_level_id": "2",
    "timestamp": "1775231562",
    "uuid": "621da7ee-640d-43b7-8b66-3cebe9c1e382",
    "Orgc": {
      "name": "Rectifyq",
      "uuid": "cd9bd516-61fa-476b-980f-2f8de03992d4"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#b94b1d",
        "local": false,
        "name": "rectifyq:mitre-att&ck=\"none-from-src\"",
        "relationship_type": ""
      },
      {
        "colour": "#b94b1d",
        "local": false,
        "name": "rectifyq:mitre-att&ck=\"from-OTX\"",
        "relationship_type": ""
      },
      {
        "colour": "#bb2745",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Standard Encoding - T1132.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#72ee33",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Keylogging - T1056.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#d3f567",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"JavaScript - T1059.007\"",
        "relationship_type": ""
      },
      {
        "colour": "#7da4ad",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Match Legitimate Resource Name or Location - T1036.005\"",
        "relationship_type": ""
      },
      {
        "colour": "#9edfba",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Malware - T1587.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#47d9d3",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Malicious File - T1204.002\"",
        "relationship_type": ""
      },
      {
        "colour": "#56c932",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Symmetric Cryptography - T1573.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Upload Malware - T1608.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#bce57a",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Exfiltration Over Web Service - T1567\"",
        "relationship_type": ""
      },
      {
        "colour": "#5bb38b",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Malware - T1588.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#1b0fe1",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Masquerade Task or Service - T1036.004\"",
        "relationship_type": ""
      },
      {
        "colour": "#a9f8b1",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Exfiltration Over C2 Channel - T1041\"",
        "relationship_type": ""
      },
      {
        "colour": "#755c09",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"PowerShell - T1059.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#b76d96",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Registry Run Keys / Startup Folder - T1547.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#6fe7f4",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Tool - T1588.002\"",
        "relationship_type": ""
      },
      {
        "colour": "#e08bb2",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Obfuscated Files or Information - T1027\"",
        "relationship_type": ""
      },
      {
        "colour": "#57997c",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Bidirectional Communication - T1102.002\"",
        "relationship_type": ""
      },
      {
        "colour": "#30cc3b",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"File Deletion - T1070.004\"",
        "relationship_type": ""
      },
      {
        "colour": "#92e858",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Web Protocols - T1071.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#4c0fbb",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Ingress Tool Transfer - T1105\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:country=\"north korea\"",
        "relationship_type": ""
      },
      {
        "colour": "#49a260",
        "local": false,
        "name": "rectifyq:category=\"threat\"",
        "relationship_type": ""
      },
      {
        "colour": "#130049",
        "local": false,
        "name": "rectifyq:sub-category=\"campaign-analysis\"",
        "relationship_type": ""
      },
      {
        "colour": "#1a0065",
        "local": false,
        "name": "rectifyq:topic=\"crypto-related\"",
        "relationship_type": ""
      },
      {
        "colour": "#ffd12e",
        "local": false,
        "name": "rectifyq:target=\"broad-based\"",
        "relationship_type": ""
      },
      {
        "colour": "#55acee",
        "local": false,
        "name": "rectifyq:MY-relevancy=\"potentially-relevant\"",
        "relationship_type": ""
      },
      {
        "colour": "#18005e",
        "local": false,
        "name": "rectifyq:topic=\"supply-chain\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:online-service=\"b0c71d51-34fd-47b5-9eb4-dd406ffc607f\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:threat-actor=\"Lazarus Group\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:threat-actor=\"WageMole\"",
        "relationship_type": ""
      },
      {
        "colour": "#626567",
        "local": false,
        "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
        "relationship_type": ""
      },
      {
        "colour": "#626567",
        "local": false,
        "name": "rectifyq:no-samples-in=\"Tria.ge\"",
        "relationship_type": ""
      },
      {
        "colour": "#3800d9",
        "local": false,
        "name": "rectifyq:action-taken=\"VT-comment\"",
        "relationship_type": ""
      },
      {
        "colour": "#3d00e9",
        "local": false,
        "name": "rectifyq:action-taken=\"telegram\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1773889227",
        "to_ids": false,
        "type": "link",
        "uuid": "5cf72f32-b5c5-4686-bc7e-69916d608128",
        "value": "https://kmsec.uk/blog/contagious-trader/",
        "Tag": [
          {
            "colour": "#6b003a",
            "local": true,
            "name": "workflow:todo=\"create-missing-misp-galaxy-cluster\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Other",
        "comment": "Description",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1773889227",
        "to_ids": false,
        "type": "text",
        "uuid": "d3d9d10b-620d-450a-b0bd-fba12727b08c",
        "value": "The Contagious Trader campaign is a sophisticated malware operation targeting cryptocurrency users, attributed to North Korea with high confidence. It involves malicious cryptocurrency trading bot projects on GitHub that exfiltrate sensitive data and private keys using various techniques, including malicious npm dependencies. The campaign demonstrates overlaps with known North Korean tactics, particularly those of FAMOUS CHOLLIMA, including the use of GitHub, npm, and Vercel infrastructure, Base64-encoded payload URLs, and anonymizing VPNs for npm package publishing. The operation represents a shift in tactics, expanding beyond the previous Contagious Interview campaign to target a broader range of cryptocurrency users."
      },
      {
        "category": "Other",
        "comment": "Summary",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1773889227",
        "to_ids": false,
        "type": "text",
        "uuid": "9700d248-1075-4229-9237-60923f34bbd5",
        "value": "Name: Contagious Trader campaign - Coordinated weaponisation of cryptocurrency trading bots by suspected DPRK malware operators\nAuthor: AlienVault\nAdversary: DPRK (North Korea)\nTags: [\"pylangghost\", \"invisibleferrett\", \"bigsquatrat\", \"beavertail\", \"trading bots\", \"lazarus\", \"golangghost\", \"dprk\", \"cryptocurrency\", \"contagious trader\", \"exfiltration\", \"malware\", \"github\", \"npm\", \"ottercookie\"]\nTgtd countries: []\nMlwr families: [\"Contagious Trader\", \"BigSquatRAT\", \"OtterCookie\", \"Beavertail\", \"InvisibleFerrett\", \"GolangGhost\", \"PylangGhost\"]\nAttack_ids: [\"T1132.001\", \"T1056.001\", \"T1059.007\", \"T1036.005\", \"T1587.001\", \"T1204.002\", \"T1573.001\", \"T1608.001\", \"T1567\", \"T1588.001\", \"T1036.004\", \"T1041\", \"T1059.001\", \"T1547.001\", \"T1588.002\", \"T1027\", \"T1102.002\", \"T1070.004\", \"T1071.001\", \"T1105\"]\nIndustries: [\"Finance\"]"
      },
      {
        "category": "Attribution",
        "comment": "Adversary",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1773889227",
        "to_ids": false,
        "type": "threat-actor",
        "uuid": "e174e1ff-bf73-4a68-9d29-1881cf137061",
        "value": "DPRK (North Korea)"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775228675",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "5924a426-78a8-44d2-9c24-80fc0e3707bf",
        "value": "154.38.188.168",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775228696",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "450d53f8-c3ed-498c-a637-01d5fe527d2e",
        "value": "23.137.105.114",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775228718",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "5ada0a9d-a7ea-48b5-8224-3444c2141313",
        "value": "39.144.60.174",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775228739",
        "to_ids": true,
        "type": "url",
        "uuid": "d10f8475-4fcb-4c06-a176-a6e6d70e80e2",
        "value": "http://65.109.25.6:6000/api/polymarket-copytrading-bot-api-key/validate",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775228760",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0193b0b-6979-4083-835f-98c1899340b6",
        "value": "aurevian.cloud",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775228781",
        "to_ids": true,
        "type": "domain",
        "uuid": "2fa7c11a-fa29-4ca3-9565-5284f22b21b7",
        "value": "changelog.rest",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775228802",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ca9c34a-aafc-4346-ab1e-4fad76cc8707",
        "value": "clob-polymarket.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775228823",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c8096cf-9ee0-4e9d-9d69-970f77c9f7a7",
        "value": "jacobtan0107.pm",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775228845",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a141f03-2b41-428f-ae15-f0c4e50e53d9",
        "value": "polblxpnl.space",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775228866",
        "to_ids": true,
        "type": "domain",
        "uuid": "87ecb465-8e89-4333-a76c-e8ac2d9cc532",
        "value": "polymarket-clob.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775228887",
        "to_ids": true,
        "type": "hostname",
        "uuid": "a2da61cf-399c-4355-a996-2e42864e2584",
        "value": "api.bpkythuat.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775228908",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5c50a463-7064-45a6-af9d-5fd2a327e20a",
        "value": "api.fivefingerz.dev",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775228930",
        "to_ids": true,
        "type": "hostname",
        "uuid": "0838343c-bb8b-4ebc-a6e8-ca346381a986",
        "value": "api.mywalletsss.store",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775228951",
        "to_ids": true,
        "type": "hostname",
        "uuid": "d8bf9b56-71c6-4ce6-8c79-66bd1f130fc5",
        "value": "api.soladify.fun",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775228972",
        "to_ids": true,
        "type": "hostname",
        "uuid": "589ac9ad-0f1e-4d10-82f0-77ea99f816e3",
        "value": "www.blxrbn.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775228993",
        "to_ids": true,
        "type": "hostname",
        "uuid": "ef6f9af4-ef18-40f5-b636-50280f39d0ef",
        "value": "polymarket-cli-testing.vercel.app",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775229014",
        "to_ids": true,
        "type": "hostname",
        "uuid": "0fc98982-7984-49d4-a85d-f71fe023bfa0",
        "value": "chalk-logger.vercel.app",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775229035",
        "to_ids": true,
        "type": "hostname",
        "uuid": "751cd140-3266-4745-a786-685e38f38d2f",
        "value": "cloudflareguard.vercel.app",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775229057",
        "to_ids": true,
        "type": "hostname",
        "uuid": "c4afde3b-b1ba-493e-81a3-32a3033f5036",
        "value": "cloudflareinsights.vercel.app",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775229078",
        "to_ids": true,
        "type": "hostname",
        "uuid": "850128b3-4afe-4940-873c-ec2ede9dea7a",
        "value": "hsdf22-tracing-ethers.vercel.app",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775229099",
        "to_ids": true,
        "type": "hostname",
        "uuid": "84a2d00f-0544-41df-a734-c2d6bfd0ccc2",
        "value": "logger.clob.health",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775229121",
        "to_ids": true,
        "type": "hostname",
        "uuid": "3e47fade-bc6a-4b61-98e6-ea8ea9f21246",
        "value": "sha256-validate-rpc.vercel.app",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775229143",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5180e96e-7af3-4122-be1c-1c8bf2c3b998",
        "value": "eslint-helper.vercel.app",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775229164",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "f5d2bd20-ace9-46d8-ab40-0a1560b81c39",
        "value": "45.8.22.144",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775229185",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "97c7d065-94f7-4b02-8eaf-ae74dead3820",
        "value": "65.109.25.6",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775229206",
        "to_ids": true,
        "type": "hostname",
        "uuid": "e57a62c9-0c26-408f-bd88-b6c85bd98efa",
        "value": "cluster0.1ufrx5i.mongodb.net",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775229227",
        "to_ids": true,
        "type": "hostname",
        "uuid": "87bd2486-1ef7-4892-b134-aed47af5b32f",
        "value": "aster.iejv3bg.mongodb.net",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1774778612",
        "to_ids": true,
        "type": "email-src",
        "uuid": "7a23e720-09c6-4dad-820e-9b292c099484",
        "value": "cryptopawsol@gmail.com"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1774778612",
        "to_ids": true,
        "type": "email-src",
        "uuid": "572b573a-6203-4f8e-87dd-fcafe2ffef08",
        "value": "ja.vierj.ea.n.070@googlemail.com"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1774778612",
        "to_ids": true,
        "type": "email-src",
        "uuid": "58a8d92e-9c90-4f2e-8a57-18907e8ebdc8",
        "value": "department.c0809@gmail.com"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1774778612",
        "to_ids": true,
        "type": "email-src",
        "uuid": "5f8c3776-187d-4429-a54b-f79f7772fae6",
        "value": "j.eral.dn.ac.ar11.223.3@gmail.com"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1774778612",
        "to_ids": true,
        "type": "email-src",
        "uuid": "042da8cb-ebba-45c4-8be5-573a0fed124c",
        "value": "tosky.pi1016@gmail.com"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1774778612",
        "to_ids": true,
        "type": "email-src",
        "uuid": "79fc30e8-b77c-4f53-a53f-d5338f3c45bf",
        "value": "vsniper97@gmail.com"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1774778612",
        "to_ids": true,
        "type": "email-src",
        "uuid": "c8fd2728-5885-4ad1-93de-a8a6db091b04",
        "value": "jonas.schneider77@hotmail.com"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1774778612",
        "to_ids": true,
        "type": "email-src",
        "uuid": "2f2527bf-7e92-4bd7-9512-738626c74403",
        "value": "matthiasdev2026@outlook.com"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1774778612",
        "to_ids": true,
        "type": "email-src",
        "uuid": "dfc32a37-1244-40cc-b250-a9f194439aa7",
        "value": "bilalkilnaz.54@gmail.com"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1774778612",
        "to_ids": true,
        "type": "email-src",
        "uuid": "8cd893dd-ea03-4fc2-aa98-64d638a6cb62",
        "value": "w.ixs.t.ocle@googlemail.com"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1774778612",
        "to_ids": true,
        "type": "email-src",
        "uuid": "9ed27e40-5c37-4f2a-9792-09785949b621",
        "value": "hp9570@gmail.com"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1774778612",
        "to_ids": true,
        "type": "email-src",
        "uuid": "b6e13513-531c-4c26-abe9-d6582790d766",
        "value": "l.os.t.k.yl.e184@gmail.com"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1774778612",
        "to_ids": true,
        "type": "email-src",
        "uuid": "a668ddc5-38ee-463b-974d-5ea2f38b489a",
        "value": "conrad.anderson75926@gmail.com"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1774778612",
        "to_ids": true,
        "type": "email-src",
        "uuid": "9224d8d9-cbb2-454b-ba3c-a6956209eb86",
        "value": "nami.jam.i.h.s.h.s@googlemail.com"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1774778612",
        "to_ids": true,
        "type": "email-src",
        "uuid": "ead67c8e-99b5-4998-86d4-8d80b54e59a7",
        "value": "di.gos.c.hristia.n.n@googlemail.com"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1774778612",
        "to_ids": true,
        "type": "email-src",
        "uuid": "6466922d-f259-46da-8d02-fe948ee943dd",
        "value": "dennis.adadj@gmail.com"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1774778612",
        "to_ids": true,
        "type": "email-src",
        "uuid": "7342096d-4f67-453f-b7d8-603a3e38eed3",
        "value": "julius.tan.biz@gmail.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775229248",
        "to_ids": true,
        "type": "url",
        "uuid": "5829852e-7ac8-4d34-b416-8aadf361e050",
        "value": "@mgcrae/pino-pretty-logger-1.0.5.tgz",
        "Tag": [
          {
            "colour": "#f08989",
            "local": false,
            "name": "NotFoundError",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1774778612",
        "to_ids": true,
        "type": "email-src",
        "uuid": "6c830d72-cb59-4dd1-ac6b-dfe6e59a53b1",
        "value": "keidev60@gmail.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775229270",
        "to_ids": true,
        "type": "hostname",
        "uuid": "c5bbed8c-9f2a-44af-a66e-233b688e9b63",
        "value": "al.lanjaysa.t.i.a.gi",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1774778612",
        "to_ids": true,
        "type": "email-src",
        "uuid": "a195ff20-1c5d-4513-a2c6-e0582fef0777",
        "value": "al.lanjaysa.t.i.a.gi@gmail.com"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1774778612",
        "to_ids": true,
        "type": "email-src",
        "uuid": "2080dcc0-3fcd-4a42-b697-060503621e23",
        "value": "jacobtan0107.pm@gmail.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775229291",
        "to_ids": true,
        "type": "url",
        "uuid": "344dccc4-7c65-4e95-bd8f-1c207c7e8ec8",
        "value": "http://45.8.22.144:8080/deep-es6",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1774778622",
        "to_ids": true,
        "type": "email-src",
        "uuid": "abc1411d-9988-48ab-a3fa-58f028f0db4d",
        "value": "cashblaze1001@gmail.com"
      }
    ]
  }
}