{
  "field": "endpoint",
  "label": "endpoint",
  "value": "49.235.158.141:2077",
  "page": "https://publicmosaic.com/config/endpoint/NDkuMjM1LjE1OC4xNDE6MjA3Nw",
  "generated": "2026-10-30T20:37:43.901Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 3,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "3a53e5f23870294cb2c5915f59169848812cfcb8030c1ee9bfeca46fd46b6390",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-05T21:09:39.238862+00:00",
      "served_by": [
        "49.235.158.141:2077"
      ]
    },
    {
      "sha256": "5fd663d2eed12d623ec3a3ecd87fbc21b04927a2e920f582bddccc1653d102bf",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-05T21:09:37.675787+00:00",
      "served_by": [
        "49.235.158.141:2077"
      ]
    },
    {
      "sha256": "9fc7dad78f7425c49cdb9c54ffe19ea375166c479f5ad3ab6115c5af7f461738",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-05T21:09:35.928338+00:00",
      "served_by": [
        "49.235.158.141:2077"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "49.235.158.141",
      "ports": [
        2077
      ],
      "still_listed": true,
      "family": "cobalt_strike",
      "asn": 45090,
      "last_seen": "2026-10-30T03:03:37.552Z"
    }
  ]
}