{
  "generated": "2026-09-15T10:08:05.236Z",
  "source": "https://publicmosaic.com/indicators",
  "tlp": "CLEAR",
  "scope": "template 7022c563de38_7022c563de38_000000000000 — https://publicmosaic.com/ja4x/7022c563de38_7022c563de38_000000000000",
  "caveat": "Combine with network scope. A bare JA4X is a certificate template, not an identity: it collides across operators using the same tooling, and a template spanning several families is a library default. `discriminating: false` marks singletons and multi-family templates; JA4X+ entries (template + issuer CN + not_before day) are the finer key.",
  "templates": [
    {
      "ja4x": "7022c563de38_7022c563de38_000000000000",
      "url": "/ja4x/7022c563de38_7022c563de38_000000000000",
      "hosts": 26,
      "listed": 26,
      "families": [
        "pure_rat",
        "raton_rat",
        "unam"
      ],
      "networks": [
        136557,
        32489,
        270564,
        399486,
        8473,
        63949,
        202412,
        8075,
        210558,
        402253,
        58232,
        400619,
        53755,
        9009,
        30722,
        931,
        399979,
        200051,
        16509,
        214036,
        62904
      ],
      "first_seen": "2026-08-24T06:50:36.462Z",
      "last_seen": "2026-09-15T03:56:31.669Z",
      "discriminating": false,
      "plus": [
        {
          "issuer_cn": "PureRAT Agent",
          "not_before_day": "2026-05-22",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "PureRAT Agent",
          "not_before_day": "2026-08-21",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "PureRAT Agent",
          "not_before_day": "2026-04-28",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "PureRAT Agent",
          "not_before_day": "2026-06-14",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "PureRAT Agent",
          "not_before_day": "2026-06-18",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "PureRAT Agent",
          "not_before_day": "2026-06-22",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "PureRAT Agent",
          "not_before_day": "2026-07-19",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "PureRAT Agent",
          "not_before_day": "2026-08-03",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "PureRAT Agent",
          "not_before_day": "2026-08-09",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "PureRAT Agent",
          "not_before_day": "2026-08-10",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "PureRAT Agent",
          "not_before_day": "2026-08-19",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "PureRAT Agent",
          "not_before_day": "2026-08-23",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "PureRAT Agent",
          "not_before_day": "2026-08-24",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "PureRAT Agent",
          "not_before_day": "2026-08-28",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "PureRAT Agent",
          "not_before_day": "2026-09-04",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "SSLRaton",
          "not_before_day": "2026-07-08",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "SSLRaton",
          "not_before_day": "2026-07-15",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "SSLRaton",
          "not_before_day": "2026-08-01",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "SSLRaton",
          "not_before_day": "2026-08-16",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "SSLRaton",
          "not_before_day": "2026-08-23",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "SSLRaton",
          "not_before_day": "2026-08-28",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "SSLRaton",
          "not_before_day": "2026-08-29",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "SSLRaton",
          "not_before_day": "2026-08-30",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "localhost",
          "not_before_day": "2009-11-10",
          "hosts": 1,
          "listed": 1
        }
      ]
    }
  ]
}