{
  "aliases": [],
  "attack_id": null,
  "attack_name": null,
  "attack_url": null,
  "counts": {
    "domain": 4
  },
  "first_seen": {
    "domain": {
      "bookstore.neu.edu.tr": "2022-08-19",
      "d0g3.cachedns.io": "2022-08-19",
      "jc.neu.edu.tr": "2022-08-19",
      "oldies.neu.edu.tr": "2022-08-19"
    }
  },
  "first_seen_precision": {
    "domain": {}
  },
  "first_seen_range": {
    "earliest": "2022-08-19",
    "latest": "2022-08-19"
  },
  "generated_at": "2026-08-08T03:26:30+00:00",
  "indicators": {
    "domain": [
      "bookstore.neu.edu.tr",
      "d0g3.cachedns.io",
      "jc.neu.edu.tr",
      "oldies.neu.edu.tr"
    ]
  },
  "last_modified": "2026-01-02T23:10:15+00:00",
  "maltrail_groups": [
    "MURENSHARK"
  ],
  "references": [
    "http://blog.nsfocus.net/murenshark/",
    "https://twitter.com/fuyinglab/status/1560583590236135424",
    "https://www.virustotal.com/gui/file/217709cbc11d5f7f73bd23de4ffad455710001519a0f0f2f6d8e6f3f5f79cfed/detection",
    "https://www.virustotal.com/gui/file/2941f19f7319b92ba58b3247374189fa8f68f9db06b5d81f0ffb8551da07a1bc/detection",
    "https://www.virustotal.com/gui/file/4093875e9d7447dcc5f8dea36a83c13efb4ec7c4c6f2eb4490a3be4fa1e63946/detection",
    "https://www.virustotal.com/gui/file/65ed7010a294b72c9418dd0514f99f17fa57ceb87bf4f7622cf27c2a7ba76661/detection",
    "https://www.virustotal.com/gui/file/67ba2688f8e3a9dd9a557328d242e51aa7a71933c0dd99b5d273bf7810ea2fa2/detection",
    "https://www.virustotal.com/gui/file/6d0e053abe4f93653bf912b09944f862898937b6a789df255778b7bdaad42920/detection",
    "https://www.virustotal.com/gui/file/bb0a259b822ca2f1073deeb71782852f474ce21d8fac466907949d9e4b580bd6/detection",
    "https://www.virustotal.com/gui/file/f8718889f17efefb3a716f0b3afd9fbf081b61afd2267e50e53acc69b38c75b0/detection"
  ],
  "related": [],
  "slug": "MURENSHARK",
  "timeline": [
    {
      "counts": {
        "domain": 4
      },
      "first_seen": "2022-08-19",
      "indicators": {
        "domain": [
          "bookstore.neu.edu.tr",
          "d0g3.cachedns.io",
          "jc.neu.edu.tr",
          "oldies.neu.edu.tr"
        ]
      },
      "precision": "exact",
      "references": [
        "https://twitter.com/fuyinglab/status/1560583590236135424",
        "http://blog.nsfocus.net/murenshark/",
        "https://www.virustotal.com/gui/file/f8718889f17efefb3a716f0b3afd9fbf081b61afd2267e50e53acc69b38c75b0/detection",
        "https://www.virustotal.com/gui/file/bb0a259b822ca2f1073deeb71782852f474ce21d8fac466907949d9e4b580bd6/detection",
        "https://www.virustotal.com/gui/file/6d0e053abe4f93653bf912b09944f862898937b6a789df255778b7bdaad42920/detection",
        "https://www.virustotal.com/gui/file/67ba2688f8e3a9dd9a557328d242e51aa7a71933c0dd99b5d273bf7810ea2fa2/detection",
        "https://www.virustotal.com/gui/file/65ed7010a294b72c9418dd0514f99f17fa57ceb87bf4f7622cf27c2a7ba76661/detection",
        "https://www.virustotal.com/gui/file/4093875e9d7447dcc5f8dea36a83c13efb4ec7c4c6f2eb4490a3be4fa1e63946/detection",
        "https://www.virustotal.com/gui/file/2941f19f7319b92ba58b3247374189fa8f68f9db06b5d81f0ffb8551da07a1bc/detection",
        "https://www.virustotal.com/gui/file/217709cbc11d5f7f73bd23de4ffad455710001519a0f0f2f6d8e6f3f5f79cfed/detection"
      ],
      "total": 4
    }
  ]
}