Jekyll2025-10-10T14:24:54+00:00/obstracts_demo/feed.xmlObstracts DemoIngest this blog into Obstracts and watch the magic happen.[DEMO] A list of IoCs2020-01-02T08:00:00+00:002020-01-02T08:00:00+00:00/obstracts_demo/demos/2020/01/02/iocsHere are just some of the extractions Obstracts can perform

1.1.1.1

1.1.1.1/24

1.1.1.1:80

2001:0db8:85a3:0000:0000:8a2e:0370:7334

google.com

igvmwp3544wpnd6u.onion

subdomain.microsoft.com

file.exe

C:\Windows\System64

/a/file/path/file.sh

4ec503be252d765ea37621a629afdaa6

86F7E437FAA5A7FCE15D1DDCB9EAEAEA377667B8

d14a028c2a3a2bc9476102bb288234c415a2b01f828ea62ac5b3e42f

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

59e1748777448c69de6b800d7a33bbfb9ff1b463e44354c3553bcdb9c666fa90125a3c79f90397bdf5f6a13de828684f

75d527c368f2efe848ecf6b073a36767800805e9eef2b1857d5f984f036eb6df891d75f72d9b154518c1cd58835286d1da9a38deba3de98b5a53e5ed78a84976

example@example.com

d2:fb:49:24:37:18

00-B0-D0-63-C2-26

HKEY_LOCAL_MACHINE\System\Foo\Bar

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.6) Gecko/20040113

ASN15139

CVE-2019-4706

cpe:2.3:a:codecabin:wp_go_maps:7.10.58::::basic:wordpress::*

5555555555554444

GB94BARC10201530093459

AU

GB

T1174

TA0006

]]>[DEMO] Some information about fakedomain.com2020-01-01T08:00:00+00:002020-01-01T08:00:00+00:00/obstracts_demo/demos/2020/01/01/fakedomainSee the rich relationships Obstracts can generate

fakedomain.com resolves to 1.1.1.1.

fakedomain.com has been known to distribute revil malware sent in email attachments from the email address fakedomain@email.com

revil is uses the att&ck techniques T1548, T1548.001 and T1650. As well as tools S1061 and S0677.

]]>