{
  "field": "endpoint",
  "label": "endpoint",
  "value": "139.224.3.228:8084",
  "page": "https://publicmosaic.com/config/endpoint/MTM5LjIyNC4zLjIyODo4MDg0",
  "generated": "2026-10-31T10:07:44.469Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 3,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "06782d4c541edc5fa9f29909e7bb0ce636f766fb6f85e2bdd5b656c2e1b75c08",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-05T15:19:52.139434+00:00",
      "served_by": [
        "139.224.3.228:8084"
      ]
    },
    {
      "sha256": "8e7d16c857c0c3f5dff5d30280ff079fa3ffd8642f1eec43908af3928fb703bb",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-05T15:19:50.956496+00:00",
      "served_by": [
        "139.224.3.228:8084"
      ]
    },
    {
      "sha256": "ebff27bf52b2f1c0290ac7d096890192a48df75d4b8bc4b00286cf622b51fbe9",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-05T15:19:48.952490+00:00",
      "served_by": [
        "139.224.3.228:8084"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "139.224.3.228",
      "ports": [
        8084
      ],
      "still_listed": true,
      "family": "cobalt_strike",
      "asn": 37963,
      "last_seen": "2026-10-31T03:05:28.619Z"
    }
  ]
}