{
  "generated": "2026-09-15T09:38:11.041Z",
  "source": "https://publicmosaic.com/indicators",
  "tlp": "CLEAR",
  "scope": "template a373a9f83c6b_7022c563de38_2e3757343cb0 — https://publicmosaic.com/ja4x/a373a9f83c6b_7022c563de38_2e3757343cb0",
  "caveat": "Combine with network scope. A bare JA4X is a certificate template, not an identity: it collides across operators using the same tooling, and a template spanning several families is a library default. `discriminating: false` marks singletons and multi-family templates; JA4X+ entries (template + issuer CN + not_before day) are the finer key.",
  "templates": [
    {
      "ja4x": "a373a9f83c6b_7022c563de38_2e3757343cb0",
      "url": "/ja4x/a373a9f83c6b_7022c563de38_2e3757343cb0",
      "hosts": 155,
      "listed": 154,
      "families": [
        "flying_eagle",
        "adaptix",
        "overlord",
        "diaoyu_keji",
        "mythic",
        "deimos",
        "chaos",
        "havoc",
        "btmob",
        "sqlrce",
        "pyramid_c2",
        "cobalt_strike",
        "darksword",
        "vshell",
        "unam"
      ],
      "networks": [
        400619,
        932,
        42831,
        21859,
        132839,
        136209,
        401701,
        36352,
        396350,
        20278,
        149440,
        138995,
        45753,
        4811,
        58466,
        14618,
        14061,
        16276,
        152194,
        210457,
        138915,
        54801,
        401696,
        51852,
        202015,
        154376,
        139659,
        16086,
        198550,
        8075,
        55933,
        29802,
        396982,
        16509,
        979,
        45102,
        39287,
        206216,
        53667,
        8888,
        213495,
        205759,
        9304,
        213010,
        50543,
        48282,
        44925,
        210644,
        43260
      ],
      "first_seen": "2026-08-24T06:48:30.539Z",
      "last_seen": "2026-09-15T00:47:11.025Z",
      "discriminating": false,
      "plus": [
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-08-04",
          "hosts": 7,
          "listed": 7
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-08-15",
          "hosts": 7,
          "listed": 7
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-09-01",
          "hosts": 6,
          "listed": 6
        },
        {
          "issuer_cn": "YE1",
          "not_before_day": "2026-08-19",
          "hosts": 4,
          "listed": 4
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-08-21",
          "hosts": 4,
          "listed": 4
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-08-24",
          "hosts": 4,
          "listed": 4
        },
        {
          "issuer_cn": "R12",
          "not_before_day": "2026-03-15",
          "hosts": 3,
          "listed": 3
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-08-13",
          "hosts": 3,
          "listed": 3
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-08-10",
          "hosts": 3,
          "listed": 3
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-08-11",
          "hosts": 3,
          "listed": 3
        },
        {
          "issuer_cn": "YE1",
          "not_before_day": "2026-07-17",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YE1",
          "not_before_day": "2026-08-10",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YE1",
          "not_before_day": "2026-09-02",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YE2",
          "not_before_day": "2026-07-05",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-06-18",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-07-03",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-08-01",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-08-02",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-08-20",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-08-30",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-06-12",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-06-27",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-07-05",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-07-08",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-07-13",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-07-17",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-07-29",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-08-01",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-08-03",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-08-16",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-08-25",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-08-26",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-08-27",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-08-31",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-09-13",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "E7",
          "not_before_day": "2025-10-07",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "E7",
          "not_before_day": "2026-03-11",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "E8",
          "not_before_day": "2026-01-07",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "E8",
          "not_before_day": "2026-04-09",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "E8",
          "not_before_day": "2026-05-19",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "R12",
          "not_before_day": "2025-10-29",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "R12",
          "not_before_day": "2026-05-12",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "R13",
          "not_before_day": "2026-05-04",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE1",
          "not_before_day": "2026-06-26",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE1",
          "not_before_day": "2026-07-26",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE1",
          "not_before_day": "2026-08-06",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE1",
          "not_before_day": "2026-08-11",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE1",
          "not_before_day": "2026-08-14",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE1",
          "not_before_day": "2026-08-25",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE1",
          "not_before_day": "2026-08-26",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE1",
          "not_before_day": "2026-08-27",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE1",
          "not_before_day": "2026-09-03",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE1",
          "not_before_day": "2026-09-04",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE1",
          "not_before_day": "2026-09-08",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE1",
          "not_before_day": "2026-09-09",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE2",
          "not_before_day": "2026-06-02",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE2",
          "not_before_day": "2026-06-23",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE2",
          "not_before_day": "2026-07-03",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE2",
          "not_before_day": "2026-07-26",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE2",
          "not_before_day": "2026-07-29",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE2",
          "not_before_day": "2026-08-04",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE2",
          "not_before_day": "2026-08-11",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE2",
          "not_before_day": "2026-08-17",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE2",
          "not_before_day": "2026-08-28",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE2",
          "not_before_day": "2026-09-01",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE2",
          "not_before_day": "2026-09-03",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YE2",
          "not_before_day": "2026-09-04",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-06-01",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-06-08",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-06-14",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-06-17",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-07-06",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-07-10",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-07-11",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-07-12",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-07-17",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-07-24",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-08-07",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-08-15",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-08-23",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-08-24",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-08-29",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR1",
          "not_before_day": "2026-09-09",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-07-14",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-07-15",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-07-28",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-08-08",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-08-14",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-08-18",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-08-20",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-08-22",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-08-28",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-08-30",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-09-05",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "YR2",
          "not_before_day": "2026-09-07",
          "hosts": 1,
          "listed": 1
        }
      ]
    }
  ]
}