{"Endpoints":{"https:443":{"Firsttime":1785420322.0574434,"lasttime":1786169181.7584963,"paths":["/ga.js","/load"],"port":"443","protocol":"https","seen_in":[{"arch":"x86","beacon_ip":"118.31.18.77","beacon_port":"443","config_hash":"216185d4db2930b73e15640016b723127074536ff425f86fcf89131a352ca9c4","trial":false,"ts":1786169178.59442,"version":"Cobalt Strike 4.8 (Feb 28, 2023)","watermark":987654321},{"arch":"x64","beacon_ip":"118.31.18.77","beacon_port":"443","config_hash":"299fa6cd4f2709a2fcf2d620188864cd1b19085bcfe8a8eec204d9a270a34703","trial":false,"ts":1786169181.7584963,"version":"Cobalt Strike 4.8 (Feb 28, 2023)","watermark":987654321}],"submituris":["/submit.php"],"urls":["https://118.31.18.77:443/ga.js/submit.php","https://118.31.18.77:443/submit.php","https://118.31.18.77:443/load/submit.php"]},"https:50001":{"Firsttime":1766733136.4636636,"lasttime":1769728122.4811378,"paths":["/push","/visit.js"],"port":"50001","protocol":"https","seen_in":[{"arch":"x64","beacon_ip":"118.31.18.77","beacon_port":"50001","config_hash":"55790f97210e0d7e51734859689151a541b855f592758c25f18502d0d2b77f5a","trial":false,"ts":1769728122.4811378,"version":"Cobalt Strike 4.8 (Feb 28, 2023)","watermark":987654321},{"arch":"x86","beacon_ip":"118.31.18.77","beacon_port":"50001","config_hash":"c85b5315bf772694653972667eb9eccb2a1f1aa0bf75f44be166c7c9f55a1328","trial":false,"ts":1769728120.8771315,"version":"Cobalt Strike 4.8 (Feb 28, 2023)","watermark":987654321}],"submituris":["/submit.php"],"urls":["https://118.31.18.77:50001/push/submit.php","https://118.31.18.77:50001/submit.php","https://118.31.18.77:50001/visit.js/submit.php"]}},"Firsttime":1766733136.4636636,"Host":"118.31.18.77","IP":"118.31.18.77","IPs":["118.31.18.77"],"Paths":["/push","/visit.js","/ga.js","/load"],"Ports":["50001","443"],"Protocols":["https"],"SubmitURIs":["/submit.php"],"URLs":["https://118.31.18.77:50001/push/submit.php","https://118.31.18.77:50001/submit.php","https://118.31.18.77:50001/visit.js/submit.php","https://118.31.18.77:443/ga.js/submit.php","https://118.31.18.77:443/submit.php","https://118.31.18.77:443/load/submit.php"],"ip_enrichment":{"118.31.18.77":{"ASN":{"number":37963,"org":"ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd."},"GEO":{"country":"CN","country_name":"China","lat":35.0,"lon":105.0},"first":1766733136.4636636,"last":1767453192.6755378,"meta":{"build_db":"2025-10-14 12:06:54","db_source":"GeoOpen-Country-ASN"},"source":"ip.circl.lu","updated":1767456638.68936}},"lasttime":1786169181.7584963}