{
    "id": "638956",
    "ioc": "https:\/\/admin.salesforce.com\/installkits\/ms3214",
    "ioc_type": "url",
    "threat_type": "botnet_cc",
    "malware": "win.cobalt_strike",
    "malware_printable": "Cobalt Strike",
    "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
    "confidence_level": "100",
    "first_seen": "2022-05-26 19:21:32 UTC",
    "last_seen": null,
    "reporter": "drb_ra",
    "reference": null,
    "threatfox_link": "https:\/\/threatfox\/ioc\/638956",
    "tags": [
        "CobaltStrike",
        "MICROSOFT-CORP-MSN-AS-BLOCK"
    ]
}