{
  "field": "endpoint",
  "label": "endpoint",
  "value": "180.184.46.116:10059",
  "page": "https://publicmosaic.com/config/endpoint/MTgwLjE4NC40Ni4xMTY6MTAwNTk",
  "generated": "2026-10-31T08:07:44.029Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 3,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "5c81765c443a7c5922da5d2cedfe5d2c80e4489bb53c69f1fe8215642f80fa90",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-19T21:14:39.814697+00:00",
      "served_by": [
        "180.184.46.116:10059"
      ]
    },
    {
      "sha256": "09b170cd54c8bed903111760ba195de89b701553897e9695972d314c5bc91c0a",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-19T21:14:38.996926+00:00",
      "served_by": [
        "180.184.46.116:10059"
      ]
    },
    {
      "sha256": "74c39a2ceeff6dc544bc97f8cc1dcf95db87bfbddf3b6b9736cbcb74e2c6bd15",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-19T21:14:38.518172+00:00",
      "served_by": [
        "180.184.46.116:10059"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "180.184.46.116",
      "ports": [
        10059
      ],
      "still_listed": true,
      "family": "cobalt_strike",
      "asn": 137718,
      "last_seen": "2026-09-19T21:14:32.730Z"
    }
  ]
}