{
  "generated": "2026-09-15T09:38:11.041Z",
  "source": "https://publicmosaic.com/indicators",
  "tlp": "CLEAR",
  "scope": "template c9ed8d15cf91_7022c563de38_0147df7a0c11 — https://publicmosaic.com/ja4x/c9ed8d15cf91_7022c563de38_0147df7a0c11",
  "caveat": "Combine with network scope. A bare JA4X is a certificate template, not an identity: it collides across operators using the same tooling, and a template spanning several families is a library default. `discriminating: false` marks singletons and multi-family templates; JA4X+ entries (template + issuer CN + not_before day) are the finer key.",
  "templates": [
    {
      "ja4x": "c9ed8d15cf91_7022c563de38_0147df7a0c11",
      "url": "/ja4x/c9ed8d15cf91_7022c563de38_0147df7a0c11",
      "hosts": 21,
      "listed": 21,
      "families": [
        "dcrat"
      ],
      "networks": [
        197769,
        58654,
        138415,
        7018,
        16276,
        27176,
        152194,
        205759,
        37963,
        8560,
        399486,
        202412
      ],
      "first_seen": "2026-08-28T21:53:04.816Z",
      "last_seen": "2026-09-15T00:54:50.950Z",
      "discriminating": true,
      "plus": [
        {
          "issuer_cn": "Dumplings RAT Server",
          "not_before_day": "2025-08-18",
          "hosts": 6,
          "listed": 6
        },
        {
          "issuer_cn": "EBOLA",
          "not_before_day": "2023-09-07",
          "hosts": 4,
          "listed": 4
        },
        {
          "issuer_cn": "Dumplings RAT Server",
          "not_before_day": "2025-10-10",
          "hosts": 3,
          "listed": 3
        },
        {
          "issuer_cn": "DcRat Server",
          "not_before_day": "2025-08-30",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "DcRat Server",
          "not_before_day": "2025-10-22",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "DcRat Server",
          "not_before_day": "2025-11-16",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "EBOLA",
          "not_before_day": "2022-10-18",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "EBOLA",
          "not_before_day": "2023-08-06",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "EBOLA",
          "not_before_day": "2023-09-05",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "EBOLA",
          "not_before_day": "2023-09-15",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "EBOLA",
          "not_before_day": "2025-11-18",
          "hosts": 1,
          "listed": 1
        }
      ]
    }
  ]
}