{
  "field": "endpoint",
  "label": "endpoint",
  "value": "66.154.119.224:8899",
  "page": "https://publicmosaic.com/config/endpoint/NjYuMTU0LjExOS4yMjQ6ODg5OQ",
  "generated": "2026-10-31T03:07:43.381Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 4,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "9b2125e6f1149f21625536d9b4e52cf8cb4483c46a18c6ad2f92eac9938a0920",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-29T00:17:01.035549+00:00",
      "served_by": [
        "66.154.119.224:8899"
      ]
    },
    {
      "sha256": "bde639a47a7421fd4c282255ccfbb2daa6eb80a10a8298986592f171de58bd47",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-29T00:16:57.456559+00:00",
      "served_by": [
        "66.154.119.224:8899"
      ]
    },
    {
      "sha256": "8391f0547e652444c98b66bdc5a644b086e13bd5a2818ae5c697b374956f7005",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-09-29T00:16:54.295485+00:00",
      "served_by": [
        "66.154.119.224:8899"
      ]
    },
    {
      "sha256": "8803c9c390385aba585cf74734bd311521702b4f43a41788612e1fe95fac94fe",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-09-29T00:16:51.126403+00:00",
      "served_by": [
        "66.154.119.224:8899"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "66.154.119.224",
      "ports": [
        8899
      ],
      "still_listed": true,
      "family": "quasar_rat",
      "asn": 7393,
      "last_seen": "2026-10-20T00:17:26.768Z"
    }
  ]
}