{
  "field": "endpoint",
  "label": "endpoint",
  "value": "150.158.102.111:8049",
  "page": "https://publicmosaic.com/config/endpoint/MTUwLjE1OC4xMDIuMTExOjgwNDk",
  "generated": "2026-10-31T03:37:44.164Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 3,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "af561548ae2b8dbfe0366e25f9b1789f31fbb76b05ea8faaa981ade1d208c211",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-05T21:09:04.729271+00:00",
      "served_by": [
        "150.158.102.111:8049"
      ]
    },
    {
      "sha256": "2f02e560218b540ae40b0c582b7103fa6371f344ee4d30e8933d1c9d6bc74f67",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-05T21:09:03.268507+00:00",
      "served_by": [
        "150.158.102.111:8049"
      ]
    },
    {
      "sha256": "717af430f1eceff5275a20eb289ac51ba6bd9d4b2c9a3b4616f7a4f9e5197c5e",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-05T21:09:01.778781+00:00",
      "served_by": [
        "150.158.102.111:8049"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "150.158.102.111",
      "ports": [
        8049
      ],
      "still_listed": true,
      "family": "cobalt_strike",
      "asn": 45090,
      "last_seen": "2026-10-31T00:11:46.282Z"
    }
  ]
}