{ "Event": { "published": true, "date": "2026-08-02", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-08-02", "timestamp": 1785716123, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "003e007e-63c2-45d1-a398-eccd7cb1ccbb", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1785630555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785630555, "uuid": "786fbf69-4b4f-4473-af39-8586d669e7e8", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785630555, "uuid": "25ab7ff4-b781-40fb-a982-7ea3a97c6a6d", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785630555, "uuid": "9366783a-282e-492d-b297-430da3e4e556", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785630555, "uuid": "ded1b33f-df1e-4ac8-ae60-97747e55f50d", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785630555, "uuid": "63150d4e-f6ea-43b0-a762-be5d90d1fa2e", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a5087b6-8e0a-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785631134, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785631134, "uuid": "67874bfa-94ce-4296-aa5e-17a4c457eab8", "comment": "Malware payload (Mirai)", "value": "69cd092182dcdb51abd81a7d88478569", "object_relation": "md5", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785631134, "uuid": "7e7818bc-fa3b-4afd-a03b-062a559de8cb", "comment": "Malware payload (Mirai)", "value": "3178e838e991d58717ede5115f146b7ff6882aeaada063e0243d50f5c5d85122", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785631134, "uuid": "52e5df1e-b40c-4be9-8efb-22b11f1e25c8", "value": "T195F3BF27724F1450C8A505F496EB9B6E3B2316404EAF5AEBBC7E233E9E730CA15407", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785631134, "uuid": "33255030-dd86-4f79-8afa-9268b203f29b", "value": "3072:CMgoEc8PCvuE8orM9JzHziRjiPq5qwg3Cth3TJXUZ/qq:tgoEc8Pu/gJzTPCUFCtTX8qq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785631134, "uuid": "2501838c-2233-4415-9c18-d6f6b295ebbe", "value": 165328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785631134, "uuid": "fac17116-29cc-4387-86c4-72eacfb17f1e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abd596e2-8e0a-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785631190, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785631190, "uuid": "c1d19d8c-65bf-4888-8eb0-7d470cd7348a", "comment": "Malware payload (Mirai)", "value": "c7e79791d415c7a7f2968dce6c6bf48f", "object_relation": "md5", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785631190, "uuid": "11f3a6ad-ddf1-489e-9be1-4ae82c5fbf44", "comment": "Malware payload (Mirai)", "value": "631edb65012fe8dff1eb511edc1660fc8cede0bafe531f507cc491654e47fd6f", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785631190, "uuid": "df8a9ea8-5d00-4f1c-8e15-b3724310bbe0", "value": "T1B313E0A3D6FD6E81C56102731E3E1A26AC2AD50E91419CEB7BE0247B20D7B1C7E059", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785631190, "uuid": "6310e109-4024-4c17-a794-49c9e6d70b9a", "value": "768:XCkO5tOKfhaFFTnUqVcLJCLUD5KG0HOdrLG9FUfAnd4YCbEnbcuyD7UkWykkAe:XRO5tOK0ZnUqCgif0HELG9FUoOJbEnoV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785631190, "uuid": "73ea644b-b69e-497d-b9c7-87b4c7faaf6c", "value": 43928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785631190, "uuid": "04febb8c-c621-4a11-a6af-1aba9a83cb0e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d152dcf3-8e0a-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785631253, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785631253, "uuid": "a3db26dd-f506-4026-86e0-c207b5b1f6d1", "comment": "Malware payload (Mirai)", "value": "0b5f3e31b64463bc4e5cf572363c3f2a", "object_relation": "md5", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785631253, "uuid": "1c84af75-0937-4c94-ae02-04a240683b3b", "comment": "Malware payload (Mirai)", "value": "f47c9c3d3efc98916fb74aa908075ffadf39b219dbdd7fa17d3da24ea77322cb", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785631253, "uuid": "f25a9793-ec58-492f-96c1-4051723eb08e", "value": "T16253025438065BECFE05C27C91E107A829A79A765272D42B28C8CEA3DF5498C3D5BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785631253, "uuid": "4a2467cf-ad8b-4bd2-b09b-68bcdf3751f4", "value": "1536:KxwOGojcwOACygI8XgHe0L/JhWklXKxyXc2baVJu7:KfGouy76gxzHWCXMYfOVQ7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785631253, "uuid": "7835a85a-00aa-41d9-9c85-6aeb6f07d5c4", "value": 60948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785631253, "uuid": "07cc7f3f-7f8c-40ec-8c93-0eb54f17d248", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07fef59b-8e0b-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785631345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785631345, "uuid": "fb1a2059-2a64-4d12-a7d1-e6ffb33d98cd", "comment": "Malware payload", "value": "e34874241bfd3e74616e7034338e1c80", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785631345, "uuid": "acee872d-3e2b-4530-8d47-d3b401af6c12", "comment": "Malware payload", "value": "33ff779a7972962a7c0f86cc3b3c309646c746a3783cc7d00e33544c5532e1c5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785631345, "uuid": "6488e7b5-363b-4ff5-99b2-e9674b795fc5", "value": "T1A0B186274829AC721157CAA4B146762DC0EA8277F342C65A72FD815C9FD3DC381E37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785631345, "uuid": "1f52c52c-fa74-4689-8e6f-240ad08ccb77", "value": "96:MJlH7n472wO36VvLb9NE0kNUmgHwrSUx9PGcq/GNt7sGqExml51pOT1pV8Q3O3NZ:MvH7n472wa6VvLb79GUm3H9PyGNt7s91", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785631345, "uuid": "864d4a1d-232d-435c-8897-d85929a6c930", "value": 5413, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785631345, "uuid": "c3973688-2daa-4e13-9030-4cc72cf5b2a4", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a6820d5-8e0c-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785631779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785631779, "uuid": "fc4960ca-d941-47a0-b442-4c70dce0657e", "comment": "Malware payload (Mirai)", "value": "dbc3cc5020fddf990ef1f20dcd2b052b", "object_relation": "md5", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785631779, "uuid": "3f20a0fc-9f49-480f-8644-6953f0cbbbb9", "comment": "Malware payload (Mirai)", "value": "61bc9a3758c56d8cb261853b8b9feb686d5da08402f83564089c09610d3c6cef", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785631779, "uuid": "56dfc635-af9c-464e-b8a2-e52fa11edc33", "value": "T10543E11814B8583AD6710439E53C1B4976FB83B485CF231B325A0964A5CB7E9A6BF9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785631779, "uuid": "971503ad-568f-4bf1-9f6f-e62174d83b10", "value": "1536:NkdFpMP267Fhi9pZBIqCZHprpSAqVxo/FvBzx:N8f8B7amqCwAIxYFvB9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785631779, "uuid": "e337722d-51d0-4c7b-9be9-3d20eae0493f", "value": 56556, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785631779, "uuid": "be56177f-bd8f-488f-8f38-096a7d0b3c4a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91c11105-8e0c-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785632006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785632006, "uuid": "2116751a-6c2c-49f5-8f84-7f45946bce84", "comment": "Malware payload", "value": "38f0d2e609600db8e4935eef6e573770", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785632006, "uuid": "f1f53a2b-21e7-4c62-88c8-72acf91024d1", "comment": "Malware payload", "value": "276595c34ab93022c232f95e3964423fec57a849637cc635b57fae8be94c89ae", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785632006, "uuid": "e6b75f6f-f903-47ed-b8ab-712a9ffbd37c", "value": "T1B8931871349F152A166F836F80427A1CABAD85DBC6019AE8F8FD51195FF0D8933A36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785632006, "uuid": "705eed0b-a65f-497a-b384-60b4ebc63288", "value": "1536:dVypTp7uwMmAIa14oXWgshepfV7tb73qsAxCuQyG8B9SItotraRLfhupupUmNxj6:dQksq/dyG8zSItotraRLIpupUGxl8J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785632006, "uuid": "7b55edc6-7536-40ff-b8c7-04727f767275", "value": 91649, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785632006, "uuid": "7d78f463-c85e-470b-af79-7fdfef996546", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b666efa2-8e0c-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785632067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785632067, "uuid": "2d896ac1-a6ed-49ad-8a09-a84b280203a5", "comment": "Malware payload", "value": "d398c2cd0a4be0d079fb5fed41cacb88", "object_relation": "md5", "Tag": [ { "name": "d52f85", "colour": "#0e6ffb", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785632067, "uuid": "7848d121-43e0-47c8-a2c8-0cc3da5a566b", "comment": "Malware payload", "value": "ac712a69261cb774982a217a3a45e68fe7e9fae39b3d5c2ee47e9283e57f0308", "object_relation": "sha256", "Tag": [ { "name": "d52f85", "colour": "#0e6ffb", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785632067, "uuid": "fa08a0d0-6857-4238-83d7-93340dfc6998", "value": "T1A3E4F00AF2A691E8D12E9475C7148A52F7773E1143C1D66E42D0F23D6F32A90BDE9E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785632067, "uuid": "7cde7e72-b292-4bdf-9883-f27c929b11c8", "value": "905d6e2fd95bb9d68bb959ec7e8cfb12", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785632067, "uuid": "e2a21c9c-bfa1-4e17-a93d-b8003d2064f7", "value": "12288:fVrlfrDr80mR2BJRCMNeJ3l0EF0NMANQtgU6BM7zZ1QNKPB54CHNJoJNDHK:DrDo0mRbH10DOsQ9JzgUL4aJoJNbK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785632067, "uuid": "f65d5439-0335-4a26-a319-ce8fb0b04fcb", "value": 689448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785632067, "uuid": "65cf5b52-de2b-4abb-a82a-643dc3724d95", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a512051-8e0d-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785632449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785632449, "uuid": "e218ac53-f91b-4cae-91f8-99554a840825", "comment": "Malware payload", "value": "0e46d54c7dc43b9f0ed720980054ea73", "object_relation": "md5", "Tag": [ { "name": "ArkeiStealer", "colour": "#6ca1b9", "exportable": true, "hide_tag": false }, { "name": "AveMariaRAT", "colour": "#c75060", "exportable": true, "hide_tag": false }, { "name": "d52f85", "colour": "#0e6ffb", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785632449, "uuid": "14c23a29-fcf0-44e0-8ccf-a675afc7c252", "comment": "Malware payload", "value": "1447ed0893b9095f671e2f35a2a0127890040b5459534813b0f83c3e1fffa0bf", "object_relation": "sha256", "Tag": [ { "name": "ArkeiStealer", "colour": "#6ca1b9", "exportable": true, "hide_tag": false }, { "name": "AveMariaRAT", "colour": "#c75060", "exportable": true, "hide_tag": false }, { "name": "d52f85", "colour": "#0e6ffb", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785632449, "uuid": "0aa9152d-52aa-4661-8fb2-f1faa4c7c38c", "value": "T1B3E4F00AF79611D9E06E5870CB154662FA773D2183D0DA2E02D0F73E6F32550ADE9B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785632449, "uuid": "47e95a71-f136-417a-913a-6df61c46362f", "value": "905d6e2fd95bb9d68bb959ec7e8cfb12", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785632449, "uuid": "e2e3b099-1541-440e-ab9b-18a2ee87a6af", "value": "12288:VVrlDHj5cfPYlJTbpyHPeevmlsbcn9/1YZ5W/QLG/nkHRC:pHjOfPOpaPeevinF1YZ4/QLDU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785632449, "uuid": "e13a1e99-4589-4581-baf7-51800e7e9bc0", "value": 689448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785632449, "uuid": "98e7e0be-88d1-4886-ae5a-8128dbd8ea88", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c78bc06a-8dca-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785632723, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785632723, "uuid": "151e34ef-88cf-4194-9c2f-2830ba42a849", "comment": "Malware payload (Mirai)", "value": "dba134c40fb44800211b2eaf27611da0", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785632723, "uuid": "5ab506a0-02ac-41fe-bc15-d2b50a24e262", "comment": "Malware payload (Mirai)", "value": "405ab54e2f2b5f8e2b865ec75e0547ee4aea3a6521402958c18a40b7e8ade432", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785632723, "uuid": "007b4a8d-8246-4572-945a-345ca925903c", "value": "T107C44A55F880AF61C6C539B6F64D42AC73074BB9D3EB72069A144B343BDB86B0B3A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785632723, "uuid": "0976e358-8631-44f8-9944-dbbee21bb3e2", "value": "12288:+WFtt/OIgS0XDjqo58WeiF3Zfly8pLb/B:F3t/OTjqdg5r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785632723, "uuid": "d04edbb7-38c8-446b-a37d-24d4f55e5d11", "value": 559368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785632723, "uuid": "da4290ca-61c7-4e4d-a0cb-686995816936", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50923ab5-8e0e-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785632755, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785632755, "uuid": "cce2e59a-27c7-4162-b99a-87c0e1c4f31e", "comment": "Malware payload (Mirai)", "value": "d54cf40b605a0d28a458a080f7d0e613", "object_relation": "md5", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785632755, "uuid": "3d147038-4d19-42ec-9ca9-f345bcf93335", "comment": "Malware payload (Mirai)", "value": "fd8afd2e0d2d6b33739270e33d0343efaaf9856e0ad26f98cb2cfdb3f72360cb", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785632755, "uuid": "289c80c0-f80b-4c26-8e78-d4c1f01bffb6", "value": "T1AF33F27E51553C30EAB0333EA1D18C9722A58A7582DFF9F30A144E296B7268360F3E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785632755, "uuid": "f0bdf4b0-6f5d-457b-b259-0ef2b5092921", "value": "1536:NRcE/LRFZAIF6M9v9G2NTppUZQCjFYNi3vGRzz0:NeWLRQsLv9GMp2SEFQweRzY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785632755, "uuid": "640dbb51-00e3-4bef-a21c-6dfd229eeb19", "value": 55052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785632755, "uuid": "dffa4b44-52ce-44b0-95b8-07e03e9ee634", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39353833-8e10-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785633575, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785633575, "uuid": "c9f11dea-f684-4829-a391-3bdb56e56f86", "comment": "Malware payload", "value": "8b225db7a8678d911a734e714eaa9eea", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785633575, "uuid": "70b1495d-72bf-4f10-b964-a33a60b0e4a9", "comment": "Malware payload", "value": "6b62930ab4ec3d668302425ef14c7486350f77ec61d45939c7ab4dbf58248d2d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785633575, "uuid": "2521f148-f30f-4f0d-9078-12bb39d3b66f", "value": "T1F8D3A55EEBB2317572178308FAC1F728566DC243EA011EF6BDB5E158DBC229601B36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785633575, "uuid": "7cb70891-d222-43f8-8c4a-d0f317cc6921", "value": "768:4ZdapEbrTREsc4xzlURXGRNjcXscJGcz74k/tHcmDDDA40zPyhJg+prA0:wapAr5lURr4kDD3A4YahJgen", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785633575, "uuid": "7158c885-f391-4685-8214-8a146be16063", "value": 135765, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785633575, "uuid": "c25cd80f-682a-4143-b9c5-890b26e86a0e", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07514e84-8e11-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785633921, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785633921, "uuid": "95b048d1-ca40-4009-a61f-0a35344ff01a", "comment": "Malware payload (Mirai)", "value": "f7e9661e0b26e3494d3b61dc74e68887", "object_relation": "md5", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785633921, "uuid": "12afa40f-3adf-4f3a-99b9-ef63927d9fe8", "comment": "Malware payload (Mirai)", "value": "9651658cdd06bf43195524fe79ba39488d96c971bc5c3ac822f2a6abd9f33855", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785633921, "uuid": "de92e0db-c266-4c20-9f74-29ca85b760e0", "value": "T1C2E36D22CC356E9CE036ED31603C8ABA172394E4540B9EBA3967C3714057DD9F996B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785633921, "uuid": "a18d42ff-42d1-4ca5-b3c9-dc31d9aa21e9", "value": "3072:9HdzG5SM8ZpZq1YgDMkiiCaykjMWiuU5RWoyo40Y7:9p8SM8ZLq1YgDMkShkjM5P8oF40Y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785633921, "uuid": "c4bc4b35-8a01-48a2-a31b-7e20b95fb63f", "value": 150208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785633921, "uuid": "29302a18-1d6e-4b7c-9823-0badabd1bbcd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2753477b-8e11-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785633975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785633975, "uuid": "39ca0571-d5c0-47df-9058-5d578c91c614", "comment": "Malware payload (Mirai)", "value": "bd4e47f7394893dcf0f9c759e05a0b8d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785633975, "uuid": "5ca9077a-5af7-40ec-bf2b-db96389e35a6", "comment": "Malware payload (Mirai)", "value": "28a16751269feab605a0df2ace7b0023cfc439947ce9b23ebda0675b88bd4dbd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785633975, "uuid": "0692c6fd-a528-4d2e-b90d-f9adb4cb5685", "value": "T13D43F2722466EBBCF72B6B7E5648B240C8371A32A51B2EEE54511167067FFE11C0CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785633975, "uuid": "73dba9ad-ef55-41bc-9691-6f2318318fb3", "value": "1536:G10HkpCfuso6bUkL+hSSsVaKCUrB864dxW:GN4Ho6TKZKNVtUW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785633975, "uuid": "bfb36c93-dbd6-4ff3-a6d7-101f08f14dad", "value": 59420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785633975, "uuid": "10e996f4-cc22-4316-b0c7-ff04fae64c6d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0da1dc1-8e11-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785634286, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785634286, "uuid": "ec7dd88c-7524-43e9-873b-762224abac67", "comment": "Malware payload", "value": "a5577be92c6cee0764a6240794b35956", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785634286, "uuid": "c76b8dc4-ca52-4c5e-88cb-947c4029b54b", "comment": "Malware payload", "value": "3e8ce32163372f7d093da7d695a58fd1ce4ad5dd4dd7ebe4261f550f5bdbba75", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785634286, "uuid": "209727c4-b44e-4d49-970a-b99796e9a720", "value": "T145D3A55EEBB2317572178308FAD1F728566DC243EA011EF6BDB5E118DBC229601B36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785634286, "uuid": "2de43287-7565-43b3-85a2-52d45c4177bf", "value": "768:SZdapEbrcREsc4xzlURXGRNjcXscJGcz74k/tHcsC1kF40EzrhYTrprA0:KapArYlURr4kVCiF4BnhYT1n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785634286, "uuid": "9009694a-16f5-489c-9f61-2904e592bb76", "value": 135744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785634286, "uuid": "28ab7805-f80e-4ab7-a9ef-de1d6534d3be", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4cd9602-8e12-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785634695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785634695, "uuid": "0a181e79-4a07-4bf9-8f1c-0e9b87337c5f", "comment": "Malware payload (Mirai)", "value": "528e36d1010cf423310230fb686725b4", "object_relation": "md5", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785634695, "uuid": "3dc2682f-d4d3-443b-b537-73a8ebe849c8", "comment": "Malware payload (Mirai)", "value": "bde905ff9a0748dc6f31b52b99b712c5b410b49843729e4932b647c15707fea1", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785634695, "uuid": "62b32946-02cb-44d3-9444-21913a34c13f", "value": "T1C411DAAF045429AED6138903F274E33EF31B7FAD7EBA3B08C7856653A44844031729", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785634695, "uuid": "476a25e3-55ea-4d27-a51b-f78d8601fafc", "value": "24:5XQ9EteE+pTUVUTBTfVFTYpEXcEwpES/E9pKojEEJDEiurRwFRXCdRXnRwqqRwGz:emL+5aUxdNYyDwyh9kticw7XCTXRwq0P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785634695, "uuid": "7077edfa-3197-48fe-b551-37194d4031b7", "value": 952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785634695, "uuid": "ab94e460-3048-42b4-a453-d3e01558805e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2c758a8-8e12-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785634745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785634745, "uuid": "4497d608-ed0c-4f3d-9dcd-4f857a2a64b6", "comment": "Malware payload (Mirai)", "value": "b4eb81e7d911e9c08dea7d16ba35d997", "object_relation": "md5", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785634745, "uuid": "73e8ade3-278d-4aa9-94a6-ee7a4b61a33e", "comment": "Malware payload (Mirai)", "value": "2ffbc8a866d557a4c5bc38138385f53f76495fdfc2e816c3c03a136fd4766132", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785634745, "uuid": "854171f6-650e-4664-8dde-75d6aef6c398", "value": "T1654302A325822533C420887EFE1A00D31E5686B945CD75B75211BB88F6C7F8B9EFB1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785634745, "uuid": "a5ff4980-6f10-46d7-a67d-8fa5f41c8555", "value": "1536:xjsyC2yFBgrpbucuWSpTuXS6qf9MXM+XjciN6iLQ:xjfFT8EqfSMZY5LQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785634745, "uuid": "b7012f0b-7102-4544-b9f6-b195a785fa43", "value": 60068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785634745, "uuid": "2547dabe-1d6c-450c-a5ed-14a9fdf66937", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02cf82de-8e13-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785634772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785634772, "uuid": "320b1771-34e5-4bca-9775-4c6511916566", "comment": "Malware payload", "value": "1f9bf792808bae7900efec406c299b64", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785634772, "uuid": "ace13f39-f932-418a-a637-b77467d2eb72", "comment": "Malware payload", "value": "47753e4aacc06cd3b221b4cbad974be459efc5cc01fcb3913525574ff5c46fa0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785634772, "uuid": "75bced8c-ab53-46a6-af66-b07ecb7d067f", "value": "T12663E873B886182A311F028F6107732C75BA99D6DA01D9F1F6F661285BB4FE136E32", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785634772, "uuid": "f0c24054-09e3-4a19-8e7e-ca63f680fb2a", "value": "768:uNZdypGVU1pupU0nMF/FbD3tx27p+EeLSJb9ee7x9QqaEPWuo0sCy:uFyp4UKMpxD3tx2VDeLSJbn9QqaEPW/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785634772, "uuid": "b6e1e720-bd57-437e-855a-5237764e5ae9", "value": 68560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785634772, "uuid": "9febc67c-5cc7-4377-b120-bb4b673344be", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1dfa52a8-8e13-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785634818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785634818, "uuid": "d739fa1a-4e4d-46c9-832b-0cdfa0a05519", "comment": "Malware payload (Mirai)", "value": "4440f18cc9fc01560eea0c0c1adb6acf", "object_relation": "md5", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785634818, "uuid": "2bc9647a-7ba4-451d-828d-c57e912e4155", "comment": "Malware payload (Mirai)", "value": "8f847d78922ffdcfe6e7373d8a0227d9d74544c55472d1dcde203ba845bbd896", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785634818, "uuid": "1aa567b4-c759-461d-a3fb-e7b69ef3d14f", "value": "T19C830214A7BE9D0AEB6EA3787C69500FA448AA6A1FEDE733EC4277C3D04085713345", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785634818, "uuid": "d6efc640-4770-4066-b4b8-078561217a53", "value": "1536:2WNkuzbxERZqg254Y7D9gMQQWTtmuQKKOH5v4K1FdD0OJsSQrL:7kkxhfbSTTl5l13D0OJSv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785634818, "uuid": "c384a9a0-5a84-45fc-85af-23c6f0545cf2", "value": 81864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785634818, "uuid": "7f5eb912-014a-4eb3-8304-a9d56cb0a261", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1785635242, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785635242, "uuid": "3d94f08b-3391-4005-b14c-107373dad775", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785635242, "uuid": "7be884f6-b3f2-47de-b21f-750b2c9d0185", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785635242, "uuid": "97e8535c-4b6c-4c15-aca5-9a26c7b78f8c", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785635242, "uuid": "87de167a-893f-45ff-8938-d2225c6c96c8", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785635242, "uuid": "1a430cd0-d2d3-4c61-b6cf-1a5c346e798f", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1acbd99d-8e14-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785635242, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785635242, "uuid": "a616f1ed-416a-4d6f-a180-7133a6158a34", "comment": "Malware payload (Mirai)", "value": "89d6c46a455a89547ad989f25018ee2f", "object_relation": "md5", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785635242, "uuid": "1f610104-b8fe-4a50-b155-29dc37b07150", "comment": "Malware payload (Mirai)", "value": "7861050378c2366c6ce197e14d464dfec5ad7e7a15aed97fba99e2a9bb870e91", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785635242, "uuid": "1d843092-614a-4486-82c7-c87418bd5398", "value": "T195041797FC00CEBEF41BE37644570A057130B7E145926B376663796BDD3E0A92823E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785635242, "uuid": "1c675a50-87f7-41c8-8b0e-8dc2899bcce4", "value": "3072:YNvHE8TimUgvkth2a8iHU6luxOg8AooVsjbioLSqRty4NODVp2:Mhimk2a8iHU6ox+AoxLly4CVp2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785635242, "uuid": "0dd4cf3a-b695-4266-8cd1-8875c6751995", "value": 176480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785635242, "uuid": "d4f1059f-420c-4ed3-9673-a31e916e05e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b80d224-8e15-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785635887, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785635887, "uuid": "fb1f6957-0af7-4fa7-99ad-7c3b9638564e", "comment": "Malware payload", "value": "a52c04923a4518e9d8e0135347a9f984", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785635887, "uuid": "f8f5e58d-3172-45bb-8c6e-218fbe0b80b6", "comment": "Malware payload", "value": "84b542e77011dd37fa375827b90840fc5e96b6af2fe2b469c41f6a4d3ee2eb38", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785635887, "uuid": "976a75f8-727e-4ba1-964f-da7ab44b367e", "value": "T1DB93E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785635887, "uuid": "50a79cf5-40df-4dbf-8fb9-bec139522f69", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXxIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785635887, "uuid": "9db04904-b859-4a83-86cc-8c0f1ff4dc3a", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785635887, "uuid": "bd430737-843a-47a0-965e-0f6a61b000e4", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbb456bd-8e15-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785635995, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785635995, "uuid": "2e337648-7223-4f94-a10e-ff9f4c24ea21", "comment": "Malware payload", "value": "697debc15c15ab6bce6c0068ac6b37b5", "object_relation": "md5", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785635995, "uuid": "142e4631-73bc-4dc2-ae46-05a6c7fda13e", "comment": "Malware payload", "value": "f1dd856f66a38cae3488a9f077c4cc8c27445162e512cbb73770cac27436d869", "object_relation": "sha256", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785635995, "uuid": "b7d933fa-43a1-4005-9b1c-d1d036f187e1", "value": "T13CD523EA65F25C74C836CB72DF03E47DB069B7968B229E13B7C8A9409C562409C7B3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785635995, "uuid": "58fde8fd-223f-4fef-aa05-ecee609538c5", "value": "44140cbbe125df54636c585913f74c75", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785635995, "uuid": "8abc0798-7fd7-438e-866a-a19c064db947", "value": "49152:Re7ZoLEmkoljX43U+n8wzMlEgIIheVzWSlvjAmSis0Ms0piDs0eeS3C:8ZorkoljH+8hlEE6SShjPxPVs0ev", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785635995, "uuid": "558f6e06-a0e8-4d84-b99d-3bed198ec5bb", "value": 2932224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785635995, "uuid": "b07d24e3-6760-4f5a-be22-80edabea0e8b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20a86971-8e16-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785636111, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785636111, "uuid": "2e049b77-2149-4d8f-af6c-61f20aae7317", "comment": "Malware payload (Mirai)", "value": "876a2bcddcc21ac6a66ceffc437a77bd", "object_relation": "md5", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785636111, "uuid": "ac292b53-a591-456b-a881-8ed4ef915b7c", "comment": "Malware payload (Mirai)", "value": "fe95a35a549a6e1783f30a0727ad1b7823f7607775a34865336752a266ed304a", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785636111, "uuid": "3a499418-a60a-447d-ad89-27572b4e0a5a", "value": "T13443F2DD78C90DD9FFA79BBECD43C9C13B65C5ED17C59AD83390B2409507A889A02C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785636111, "uuid": "80d0755a-705d-436d-adce-b39571285a9e", "value": "1536:oB9+SWw8JddOQNtrXEMgiQIytRdbeyJZt4u+qgw09P:oTkw8L9EMyIKRdbeKZt4u+qgwi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785636111, "uuid": "7b34c0cf-d350-447a-94f3-d8f5277eaa7a", "value": 55844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785636111, "uuid": "776c17b5-3f00-433c-a468-fff7e6a3b60b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2342a05d-8e17-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785636545, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785636545, "uuid": "5b5359a5-7ac4-4c7a-a9f0-0daf22c2df91", "comment": "Malware payload", "value": "e4b8aabe7d0636beb834053f87aecfd9", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785636545, "uuid": "c3383dc0-82e5-4bc1-ad9e-9f2b82c0e313", "comment": "Malware payload", "value": "420dc609a9852388f9bf158e1fb7aa73032fbd7090e8217df1af504d613af30c", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785636545, "uuid": "3c3734de-965e-4bda-b4d6-64b512f64638", "value": "T13DD02EA2A06341B010928810F6D69800B184D36F4C55C619FA9354302F10284F0C93", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785636545, "uuid": "ca015769-0573-4168-8b8a-759ac8d433f2", "value": "6:hTNpF5S7x1cnN3FIvCFpAulNXYq9DG+NjVsNXYrkJ:VNrM7xobIOpPiq9DGmKi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785636545, "uuid": "e871752c-1df7-4b80-9bce-c133aec9d9e0", "value": 266, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785636545, "uuid": "a7bf6e7b-d739-4751-8774-429e41194f06", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d36bc3e-8e17-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785636669, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785636669, "uuid": "e2ae9701-9bc2-40f7-b36c-bf8c861dacf0", "comment": "Malware payload (Mirai)", "value": "0aa6b428b61c90d4295fa729ff95baea", "object_relation": "md5", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785636669, "uuid": "fc4dff1e-6451-4b74-8138-543473179c33", "comment": "Malware payload (Mirai)", "value": "736e09c587ec9320b96517f32378c1e8770ad15490d72a5113a8a62040a82166", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785636669, "uuid": "0fbfeac3-6002-45a7-8509-6088d85df321", "value": "T16963B61AEE786A26C5D0217604E34911E97263ED1BBCA68F7EA72C0DDD15360303DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785636669, "uuid": "7df740bf-1cb5-4c20-bd02-064952776d2d", "value": "1536:ULDN+d8b7oiAENci0npZ1PsJY2hEEeFCu0cRlDd:ULxOENcX1PsJYQc1d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785636669, "uuid": "c821780d-1795-43ed-a530-2bcc2fa7a16e", "value": 69004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785636669, "uuid": "b0bf4ea2-8129-4b41-9800-c0fbfbf5168f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c891c5b8-8e17-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785636822, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785636822, "uuid": "38df3122-22bc-4c83-91fa-5c0834c2ce0c", "comment": "Malware payload (Mirai)", "value": "dae117de34af609ce1c10aa6aa762632", "object_relation": "md5", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785636822, "uuid": "a0071002-e67d-41b0-89ce-b8fe36c583c1", "comment": "Malware payload (Mirai)", "value": "5ce18989a7bdc92129e04ccee765ff3b1edcc3f0f7f08dc5f6755958b5a70d87", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785636822, "uuid": "e5f69a53-af75-4907-88d7-333e2210e363", "value": "T15353F1D9DDEBFC2BC92E6DF981B86F28785840597CC6DBDFA3104A48D528B0DB0290", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785636822, "uuid": "a478177a-2ddf-47c1-822c-9dbadc25a547", "value": "1536:11daLQpNtfDuePWu5dw9Jfz1+m5i+1cflqJAzdw:MQpN5oSk+P+y8ezi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785636822, "uuid": "dbc78273-eac2-43c8-8577-16795d8d8f35", "value": 63044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785636822, "uuid": "2bf51b3a-7e30-4f97-9064-9b6aaffd852b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1785639981, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785639981, "uuid": "d13a342b-14fe-42ae-9832-75f8889f7ece", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785639981, "uuid": "f8c88d32-f296-4660-96fc-dc84985abdfc", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785639981, "uuid": "d7d9884f-84f7-47c9-a5b2-ac1831b45ab3", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785639981, "uuid": "85c53473-b1e1-4e17-aaa2-449bfeffb89b", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785639981, "uuid": "77a7816d-f7ff-455b-b7c1-cec27205d1b7", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1785644425, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785644425, "uuid": "ef3f91f4-0bf9-4012-9939-1a4f92d9dd83", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785644425, "uuid": "5c4cf378-fbcd-47f3-9312-3a2c7b4a3f41", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785644425, "uuid": "810c492c-fdf1-4052-bb7b-c4a2f3a582e0", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785644425, "uuid": "486f20cf-9b0c-4a59-a9ab-84e6b50b549f", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785644425, "uuid": "bc84ee09-1ba3-45b1-a277-46f769f0e3fa", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43d1307f-8e2b-11f1-8d7b-82aee05be84a", "comment": "Malware payload (AnimateClipper)", "timestamp": 1785645189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785645189, "uuid": "925156a1-2a71-4148-869a-f043c546bce6", "comment": "Malware payload (AnimateClipper)", "value": "5c8e68a414254a67111c6167f44ec777", "object_relation": "md5", "Tag": [ { "name": "197b1ec4b9644da7b43669fd4f0ed73f", "colour": "#290156", "exportable": true, "hide_tag": false }, { "name": "AnimateClipper", "colour": "#63d9dc", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785645189, "uuid": "85212f1e-4e56-420e-b723-3393e2644500", "comment": "Malware payload (AnimateClipper)", "value": "350e3bddcd39098123be338cfcd12ef78a0d6cfabc48a17c6dacf31397880b3c", "object_relation": "sha256", "Tag": [ { "name": "197b1ec4b9644da7b43669fd4f0ed73f", "colour": "#290156", "exportable": true, "hide_tag": false }, { "name": "AnimateClipper", "colour": "#63d9dc", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785645189, "uuid": "81f7f924-0963-47d6-a927-0ef2f834f6d9", "value": "T17B679D35A3A4C1A8E92FC274CAB54233E6B174451720AACB0355EA55FF33AD17BFA3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785645189, "uuid": "4d36e913-4b5c-4f0c-bd05-54edfecc4acd", "value": "8c0ed5311e0eeba51b4c1a13e4263081", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785645189, "uuid": "93a07179-a761-4933-aaf0-bc75b1931ca8", "value": "24576:qC0Pf7dNvVC2cuWnd/ewT96mCTccMQjjf1aeY7Df:qvPfanHT95wlU7Df", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785645189, "uuid": "426f71da-516c-4582-83eb-24a5590fad3a", "value": 31566848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785645189, "uuid": "045c26ad-6dd6-4fb2-8c0e-4a0bff93cd78", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01ff554c-8e39-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785651092, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785651092, "uuid": "2c1608fc-d938-4d51-be6c-aee09225dbcf", "comment": "Malware payload (Mirai)", "value": "273aadd3b9f0741de08dece06a908de6", "object_relation": "md5", "Tag": [ { "name": "2-26-136-128", "colour": "#11421a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785651092, "uuid": "de5fee05-7d66-47d3-be98-f5a719d1ed44", "comment": "Malware payload (Mirai)", "value": "fdf0a3a084b3ee58a9bafb561a9ef3ee33e343e47f15d00c76bd0834c951ec68", "object_relation": "sha256", "Tag": [ { "name": "2-26-136-128", "colour": "#11421a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785651092, "uuid": "7ca53664-bb66-452c-b9b1-c111a8f717cf", "value": "T1BA31FE95A2D09DF9CCA491BEAD56431173649F80F0C732A3920C7715BE2AE7C9C260", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785651092, "uuid": "0e72d69f-9951-47cc-90d3-e760a428dd64", "value": "24:lpKGpa7Urz/jlfDOXK1hH9Vev3gRGH9iM/BBuk0S2lxrR+zHGS90t:/KGpa7UrLZRIz5Buk0FlxrsHGS90", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785651092, "uuid": "0ede1477-f2a8-4919-8658-578bd054e6e8", "value": 1448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785651092, "uuid": "97061884-ab93-4316-90f7-ed11e3453cc8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "387801cb-8e39-11f1-8d7b-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1785651183, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785651183, "uuid": "c6f46223-5108-42d4-bd71-d327080557be", "comment": "Malware payload (CoinMiner)", "value": "a1af1a6133606bf3f13177df0680ba46", "object_relation": "md5", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785651183, "uuid": "481e9003-84e4-4761-9d6f-74e3a57da697", "comment": "Malware payload (CoinMiner)", "value": "aef01ab9e284b663cdd5caf288eff4120406ae452f5fb73e4b135c542aa59919", "object_relation": "sha256", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785651183, "uuid": "91cdbfd6-5229-47e5-9f77-a953df62c542", "value": "T1DB3633CBA4D665F9C412CBA0CB1330ADB1BA3BA54B607C023FDC56185D66D6914BEF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785651183, "uuid": "5508d63b-5f9a-432e-8cc2-408606a022fc", "value": "35171f6f6a1bfee47cbc04cb345c411f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785651183, "uuid": "b41795e0-92ee-4d92-92d1-38662a721e39", "value": "98304:kB69H2ugWrS+l2PU+ijjVqikd2VOMyII9CY5sVYdLGpIqpf51uIqDzqDaMe2hVBA:7cugj+oPU5vVDkgVwz9CY5sI4Iqpf51U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785651183, "uuid": "13531f75-ab28-4b79-981d-37ffef26cfe4", "value": 5218304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785651183, "uuid": "f93cfa9b-da97-48b2-b7a9-8f148c32b9a9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7de1cd50-8e3a-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785651729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785651729, "uuid": "14842162-606c-4a9d-a292-7fd1e84dce7b", "comment": "Malware payload (Mirai)", "value": "46c596d7f780f87054d3a4d5e3db57d9", "object_relation": "md5", "Tag": [ { "name": "2-26-136-128", "colour": "#11421a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785651729, "uuid": "1e457de1-5477-48a8-8326-e36ff8248693", "comment": "Malware payload (Mirai)", "value": "b9a96066856f30c4d0e54547d8420957d79e493e32ea5792504dc065da8801d3", "object_relation": "sha256", "Tag": [ { "name": "2-26-136-128", "colour": "#11421a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785651729, "uuid": "dcd5e7d1-d75e-43c6-a40d-dc434af5754e", "value": "T15A41F0CA5F718EF9F45AD53847270B3927AA554843C04289E19CDA005EC130D849E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785651729, "uuid": "761f0192-2623-4174-b02c-03289a386783", "value": "24:3+jMdb5jl8AmslI3t8AmypR/z2H6llPJ2qtWB4u3GMI8paeudz3N9l5zBkEp7iP+:Oji5E4GYg2HyK1eHeu/9LuEpEon3weBl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785651729, "uuid": "e1c5bb0a-1170-43f4-b4cc-63ba70d92e6c", "value": 2000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785651729, "uuid": "a9c65274-6bfb-4166-a817-408c156a1fec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b220fa8-8e3b-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785652127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785652127, "uuid": "df6e67d4-66e5-4973-8489-cbf06df01bff", "comment": "Malware payload (Mirai)", "value": "9c10908b8a70fb34a1df1d6f6a754479", "object_relation": "md5", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785652127, "uuid": "ad6ceecc-8c3e-438a-af0d-ecacd5c1f899", "comment": "Malware payload (Mirai)", "value": "05acc2835d011a176fd39f26a59accf2d73ef0365a26c61510d08336f2b8953a", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-127", "colour": "#a8b2b2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785652127, "uuid": "609fbc8a-400d-436c-a9c9-1d47af984701", "value": "T1AD4302C668D73871FB667AF9B3618487305C5E70F5FCE1CB201B80A50FA328597B16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785652127, "uuid": "175d236f-6b66-4ea9-b717-88cc7cb3f6e2", "value": "1536:hIG0lD7Igk0f/thiqsD+UUJXbKi8aS6U3MOLv:hIGmD7xkUTlXbK1atU3VLv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785652127, "uuid": "d8ad0d19-2e17-441c-988a-bfdc87e43b2c", "value": 56288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785652127, "uuid": "48dbd6e4-119f-4b49-8f46-1e79d4642421", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08438043-8e3c-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785652391, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785652391, "uuid": "d1a2c5ed-43a8-40cc-a385-8be79ab353f5", "comment": "Malware payload (Mirai)", "value": "5baadbb01f0ccae2c00849a4d1be8052", "object_relation": "md5", "Tag": [ { "name": "2-26-136-128", "colour": "#11421a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785652391, "uuid": "0023f2b2-833e-4981-b97f-bfd93d2b80be", "comment": "Malware payload (Mirai)", "value": "2ab69a4ccb50354c271b887c951c7628ec8183c478462dd816acffa316e21313", "object_relation": "sha256", "Tag": [ { "name": "2-26-136-128", "colour": "#11421a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785652391, "uuid": "5a9796d4-a7cc-45e1-97e5-403d9ca07ebf", "value": "T15721ED9667D39D17CD540277DDAF6310E322EF84818EB403F31216150C6F31A1F260", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785652391, "uuid": "2a9a473c-c2c9-4dfd-96d4-862614e9fabf", "value": "24:Ji2tVsgP9qD0at6EPbrzrUlFSy40VzLCkIdsx2BWQIgOpNfe:JltVFFqDPtt7rkFSy4CzLwPIJpNm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785652391, "uuid": "54818e3a-7235-46eb-8acd-22e8034f4a14", "value": 1160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785652391, "uuid": "65dad1be-02b5-4893-9af0-d052b93b1f2d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "753fd06a-8e3c-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785652574, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785652574, "uuid": "b049b0fb-7cdf-44b4-9b62-58bdece2cc36", "comment": "Malware payload (Mirai)", "value": "d56ed677cabd7043c2d8c942bce5a320", "object_relation": "md5", "Tag": [ { "name": "2-26-136-128", "colour": "#11421a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785652574, "uuid": "e1ad03ed-6dc7-4b46-87ab-b9f067579a4f", "comment": "Malware payload (Mirai)", "value": "49878557d15cec49fd5c1edd1f62456b9dc325fdced8aeeccf058fc0d879f42e", "object_relation": "sha256", "Tag": [ { "name": "2-26-136-128", "colour": "#11421a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785652574, "uuid": "5e3831d3-ca18-495f-9baf-e5abc5ad6325", "value": "T13093185ABC82AB15D5C522BEFE0E518933535BBCE3EE7112DD109B2127CAA1B0F775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785652574, "uuid": "71b0b9b6-4af4-431f-8355-6c0f263000d2", "value": "1536:kVn/NW34Fs5jT/lU7Wl4CZx0ESZ1x+0OC6Nasso5AAQ9WlChi2Ei2rFeiZWYJL:sNW34Mjj4CZx0ESL4C6Nasso5AFtEi2T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785652574, "uuid": "d973afef-9d79-44bd-bd69-ef7ee06b7806", "value": 96428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785652574, "uuid": "2b94b0b4-7350-4789-ab2f-53089b5c1347", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8fc3546-8de3-11f1-8d7b-82aee05be84a", "comment": "Malware payload (njrat)", "timestamp": 1785652789, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785652789, "uuid": "5d485879-491a-4803-90ea-530d22b34b4f", "comment": "Malware payload (njrat)", "value": "b9fbf6f35099d3dd0f984ffb7e027b35", "object_relation": "md5", "Tag": [ { "name": "ArkeiStealer", "colour": "#6ca1b9", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785652789, "uuid": "b0e0c575-74c3-490b-9c6f-96e0addb941c", "comment": "Malware payload (njrat)", "value": "06185d74edbdc06f99095e96f74aa2e49a1cda2d02a294c11a9ac35a0231075e", "object_relation": "sha256", "Tag": [ { "name": "ArkeiStealer", "colour": "#6ca1b9", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785652789, "uuid": "00708783-1fac-4ea4-a919-7244bd9a5dd7", "value": "T141E4F119F6A650E8E15E4431C7488662FA773D1283D1DA2F42D0F67E6F32650BDE8B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785652789, "uuid": "a18244a7-cec8-4afd-8893-c519c69374c3", "value": "905d6e2fd95bb9d68bb959ec7e8cfb12", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785652789, "uuid": "742ccc04-a4fb-4d97-b5c3-29a8b9c449ac", "value": "12288:uVrlrnZXcHfoFJ3QTQyLEs6cbVDsNh9qzw87/T/xxPEyhLy4ZxUtx8VCpVf688B:inZMHfJTfLL6cZsj9qzw87/Txx/LBktM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785652789, "uuid": "7eefb54a-6ecb-46dc-9cf5-bbda7573a20b", "value": 689448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785652789, "uuid": "470186ff-2797-4b5a-8f02-cf2ca7c6b6b8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdbebdca-8e3d-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785653125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653125, "uuid": "aa7bccbb-d0d6-4b7d-8c67-82cb016bbc7b", "comment": "Malware payload", "value": "6aa16528b487da603596da89a977ccb3", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653125, "uuid": "6da1b62a-190e-4bca-b5e0-4b958224debf", "comment": "Malware payload", "value": "74ba7846ecff1c56c1805916f0dfdd8b9b8a4244e19bb0e13c18958cbbea2c57", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785653125, "uuid": "3b4831b3-cf26-4e89-a801-9f34c17658b2", "value": "T19E853335B491B178AF72DCD3A89EEDF3906AD68C03CF8A570C53A029164585C4E63B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785653125, "uuid": "36ecc1c1-3b6b-4717-80d9-dfa5df0b82d7", "value": "49152:3Ns7PYG+62nY9kWOCDcVzp2Pp1/MU3beX5m6W5:3NEPB+lXWOCDcVzC8EymJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785653125, "uuid": "797cf27a-819c-4a97-9ce2-66fbd715a930", "value": 1722336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785653125, "uuid": "b46cc0ce-523c-4564-9871-3283b72c0929", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a490500b-8e3e-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785653512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653512, "uuid": "9b91445b-306f-4ff7-8c26-ff517c264224", "comment": "Malware payload", "value": "6244ff812e9c9ebcab86ee807bdb0aae", "object_relation": "md5", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653512, "uuid": "d9fd33b5-abb3-4e03-88b7-370f872ac663", "comment": "Malware payload", "value": "88775b8ef9c98543701135e0dbec6a1c4e6f36b4d19e282c9081fc680edf56c1", "object_relation": "sha256", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785653512, "uuid": "e88c604f-d1c4-4416-b9ad-a590ca893900", "value": "T180963364BBCF9FE4F2735DF929193680B5C1830858B25A840F2F2860275E8967B5B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785653512, "uuid": "374a3e4b-1dd4-4db1-a52a-c655c22c3afb", "value": "196608:5OVvvtsMyDkK5cMhSr+hEMyes/j9wNDHOzwOpco2v+xrb:gfpA7Hhbts/kDOw6cow+x/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785653512, "uuid": "e19c824a-cd0f-49a2-b292-91411783e920", "value": 8947514, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785653512, "uuid": "add1ed18-1d3b-479d-b893-d6e125742177", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5339a21-8e3e-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785653594, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653594, "uuid": "8f7bbf3e-50b9-4998-96b3-cb252c7178c6", "comment": "Malware payload (Mirai)", "value": "8292ee844dc7ff9461ea8e327cc06685", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653594, "uuid": "8cecbc51-5d31-40cf-a3cb-5c65735403bf", "comment": "Malware payload (Mirai)", "value": "7a3e260d7dec64aee8169ab40edacb787462470fb6e1ba47119b022fd8143501", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785653594, "uuid": "21245fdd-d166-4f47-b11c-0ff43906f030", "value": "T1A4F33A49ED812B11D5E626BAFBBE5189335307BCE3FA7111AE104F3127CA91B4F36A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785653594, "uuid": "c7b3b299-d655-4009-8e8f-dd75cc0c6c1d", "value": "3072:S8zMKZT9IYYSlM3W94QkHcI4Wda+HJ/wan4E8KhUNqFUB2S+gUuu:S8zMMYSlM3W94qI4WUgNwan4E8Kh3m2w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785653594, "uuid": "60ad7849-db5b-4a91-aa7f-5ac72c5b4609", "value": 169668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785653594, "uuid": "190275c9-0c91-4182-95f8-6bac73c5e9e0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85f47ff9-8e3f-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785653890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653890, "uuid": "b075d587-eddc-48ba-bd8e-6e0018b5f026", "comment": "Malware payload", "value": "74745cc988d8b512d070c9d9f1ad403b", "object_relation": "md5", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653890, "uuid": "025abc28-05bf-4dd6-8571-71a34b0bafd8", "comment": "Malware payload", "value": "7d90b60e49f1589f7b076a6be149399d2d342dbf96fd30168e817ad9351498f8", "object_relation": "sha256", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785653890, "uuid": "e3167530-f4b8-4665-ac53-95ada9eae1d5", "value": "T1ACD5234CFCA50170F876CBBB5797B0AE712977808AB48D5632CC67201D629287DBB3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785653890, "uuid": "ca555eb6-1129-4314-a28b-50f224199f67", "value": "1799eb3c1092391ae174afa4eee4cba2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785653890, "uuid": "46f76b45-a1e7-489f-b851-a7dc3585c196", "value": "49152:55urFHgt+nKCsFEUuNBmAnT+es4MPyypLJNzFSVY9t4QDsl:DiFAt+nKCsFEzBmWI/PyypLJN8VYPO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785653890, "uuid": "f8287f24-f8c5-47ba-965e-462099947b93", "value": 2984448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785653890, "uuid": "f39348d6-d629-49c9-ab99-15c189badef3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7b718ae-8e3f-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785654081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785654081, "uuid": "ee404048-e062-47bd-ba1b-2282f93046de", "comment": "Malware payload (Mirai)", "value": "df70c864d45ebd669e4195fc893e36ef", "object_relation": "md5", "Tag": [ { "name": "2-26-136-128", "colour": "#11421a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785654081, "uuid": "5d9a55dd-536f-4cc3-a6d6-20810842e67a", "comment": "Malware payload (Mirai)", "value": "725cea7ff1e9ff01093dd31f0cd10d0bf5de671905120aa1647d1ec0401451c1", "object_relation": "sha256", "Tag": [ { "name": "2-26-136-128", "colour": "#11421a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785654081, "uuid": "2f5382fa-1ac3-4ab4-8621-80c9792c4926", "value": "T1434112591FD01F33DDA6CC36464A2B512ACC842BA16A23966374DD60BD3EA05E7D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785654081, "uuid": "9b089026-3cec-4c8c-9967-b3f426693b99", "value": "24:mNBj3HsSimpH4/ixZuDa9mGt5NJL4mmlZ9bpe4g+/qc+UTK8WKUlu/eTlQwFLCZ5:EQ2fnuDS3N6df9++SMTLWPkeTBFWXp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785654081, "uuid": "7e10ca0f-7639-449e-a4ac-a3bf506b6f8b", "value": 2032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785654081, "uuid": "94a769ec-3a7a-43e1-a53d-f610d5b0824c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4a50a18-8e40-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785654425, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785654425, "uuid": "1a0bc05b-6bf9-481f-9213-f8393a1c5b60", "comment": "Malware payload (Mirai)", "value": "3d5f27f856069cc310d8b41c5dda009a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785654425, "uuid": "400a2b47-225d-4d54-8018-172bceb55691", "comment": "Malware payload (Mirai)", "value": "311801ec16acd402a73c138229f77e2bbc5ec5f4efc8645220f74b032c68c5fb", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785654425, "uuid": "7e158830-2b7a-4b6f-b832-0499be75e4d2", "value": "T16C531781BC81D903DAD42336BA6E55DE331123DAE1DA3703AE162F5137CAD1F0E6B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785654425, "uuid": "5188710d-7e78-41a3-946d-be032c18a475", "value": "1536:rnkj/klTvurUuBho1GB3ANQwk7XQMYMGrVo/qy:7kj4TmC/0/BGruy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785654425, "uuid": "a3e5976f-a32a-4e3c-8af1-bb2c58e7b91c", "value": 66584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785654425, "uuid": "38c245c2-9e91-414b-9ade-6f71f4b0ed24", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6bea506b-8e46-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785656853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785656853, "uuid": "845758e0-5fa7-4096-b615-83429216506e", "comment": "Malware payload (Mirai)", "value": "e50d6e16f2a5443bf1a79040888f0f08", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785656853, "uuid": "b742048c-8fde-4cbb-b49f-1cb87cd7cdc1", "comment": "Malware payload (Mirai)", "value": "3419dd8397c7282917e54bc166e0d5cdbeff44ca0b6f074571dad1d09e742886", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785656853, "uuid": "4b7108d8-2d14-44a5-b624-727975c0dbe7", "value": "T165E2F16891DD0221F7FE937BE5EED886B43098E2079BC90134D15B7538BB230DB5E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785656853, "uuid": "bf42d674-9c74-49e9-9344-15331f046454", "value": "768:iIPBQe76Dx/AC2ZAGaozPZgdcPuWYFSUXOCt9UHfw0pdbS/u/b:iIPBb6Dxo7n8aPRAXOCt9UHo0nbtT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785656853, "uuid": "ded5e1dc-cfbf-4501-9705-b20b6b9b419e", "value": 34148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785656853, "uuid": "4126a662-5f14-4f08-b897-918e75410c01", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35c685a5-8e47-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785657192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785657192, "uuid": "3d8a7aa7-1c1c-4503-9383-b987bb9cb95d", "comment": "Malware payload", "value": "0b4309364a0af57e9d489a82070897ac", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785657192, "uuid": "7028bd34-b35b-449d-99a8-dda12e4f7ba4", "comment": "Malware payload", "value": "44594f2ed6d11d65023596d704d33df1a7846f3d6b2470e99be1d8b324144926", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785657192, "uuid": "e3d92342-219c-4719-ba62-079268c2e2c1", "value": "T12EB6AF16FF0D0C32C58EF3B429D74B96E739E28B5643E74B2D1089887C931D86A167", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785657192, "uuid": "377a57c0-7b01-4828-a870-a3c228519aa8", "value": "49152:xLjByemMqOScotCAezEiFWMK4k1oCWv+L3jYndXkpRo6EwbEgk6Q2ueJKbMSOR+y:WemMqB2zNFWVR4wb/yeJsLOR+khKAb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785657192, "uuid": "af6bbc4e-1f2d-49ba-8c5a-877ab4c6e747", "value": 10519149, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785657192, "uuid": "916ee767-3e85-4e8b-89f9-617fd60e2bca", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7187bbc-8e47-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785657382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785657382, "uuid": "24b58b7e-1b91-4ecd-a433-4efba8f5675a", "comment": "Malware payload (Mirai)", "value": "55ee253f78a89c28060c1f910f39907e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785657382, "uuid": "a19748de-65eb-499b-a7bf-1ecf50b573c3", "comment": "Malware payload (Mirai)", "value": "e7bafa13cd6341c27abd8e34f0825503fb36a5ba40d402382b6a40f160cf01cb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785657382, "uuid": "d6775662-be5a-4fd9-9401-faf93dc610f3", "value": "T1AD734B22BA751D2BC4D4E87A61F30321F2F2478A25ACCA1A7D720D4DBF65A4032577", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785657382, "uuid": "3bd8d0b9-4c36-4086-90ad-880624095b50", "value": "1536:nJxSUCuRy82KFEFfkLaxQ+tBPznN95YYsP08tu8/1e:JIwaFcL2DDNPVSe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785657382, "uuid": "bbca0fc6-0152-4e25-aa69-51f86e0f0ec5", "value": 78952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785657382, "uuid": "72ebf694-0299-427c-a1d7-ec11887d1326", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3b189a4-8e48-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785657832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785657832, "uuid": "f956a06b-e729-4d44-8720-bc53552c6411", "comment": "Malware payload (Mirai)", "value": "108ec599e29802681f155e8a4a0954fc", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785657832, "uuid": "211f4614-b5e0-43f8-8ffe-1cb17ef2af27", "comment": "Malware payload (Mirai)", "value": "5be2aed25e538e836c7bc1fcf4c065294a7ef7dab3ef52288ca2ef4a738151a3", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785657832, "uuid": "86e2c2ca-63ff-46a6-8319-68bbcc005ebf", "value": "T14CF2F1742E99BCE2DA304C32DB30C75A77A71534F9F635A41BB44A21AF9C186A93C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785657832, "uuid": "41609250-9c55-45b3-97dd-09229de37e18", "value": "768:inhqf+QwLOyCan8CVLQ663RBP4f7ws3Uozo:qVOgn8mM663Lmzo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785657832, "uuid": "c62c7281-6e2a-488a-8f6a-284316e87967", "value": 35728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785657832, "uuid": "328101c2-5d1d-4522-b603-50f29514c75c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef67861d-8e48-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785657933, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785657933, "uuid": "60122dd9-3957-4a3a-ae73-ea4fde782f45", "comment": "Malware payload (Mirai)", "value": "261d26d29bdfa44ff9c501e79debb715", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785657933, "uuid": "48e5e559-ea5b-4ab1-8011-943fc4235c91", "comment": "Malware payload (Mirai)", "value": "076a0ce21586446d8ef48b9b42ad5ecd0e616c04de119f013df971e51768d703", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785657933, "uuid": "d579b200-3ebc-46fe-aaaa-b6c042324a60", "value": "T1D1F2E1DC07162ABFC05580B826E007143D71AFB321D46D9B7195FA5BAF016B33DABC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785657933, "uuid": "081c890b-8191-4437-92f8-cbc41d4586b6", "value": "768:b9NyVDHFgevIiCdAHO7YbSnLTyqX1402IJX/tzJgGlzDpbuR1JBZ:7ugeDCd+O8OHyqGmPVJuHZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785657933, "uuid": "4d21dd96-5283-4f22-ad85-1dca9fd97137", "value": 37296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785657933, "uuid": "c523e1fb-7ad9-44a3-9d45-ff6407e71a04", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bb2d4b4-8e49-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785658034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785658034, "uuid": "e68e9d07-7944-447a-a474-a983c33b737a", "comment": "Malware payload (Mirai)", "value": "9c51b7aefcd7d92a31e7bd76b5f5b3be", "object_relation": "md5", "Tag": [ { "name": "2-26-136-128", "colour": "#11421a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785658034, "uuid": "1702288e-f270-42c8-a197-34787a910e5e", "comment": "Malware payload (Mirai)", "value": "fd66a2fe2fe980c283d6efe8209d075a4f0bc1e4c684757c58f12b1ad7189550", "object_relation": "sha256", "Tag": [ { "name": "2-26-136-128", "colour": "#11421a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785658034, "uuid": "341f8bbf-aad6-457e-b0b1-19d769d95991", "value": "T14131F1D1A7D05D7DC8E451BE9E6B431473699F80F0C63923820CB7586D1AF3D9D264", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785658034, "uuid": "c76b11c1-62d8-4710-8a9d-c054516ea512", "value": "24:uAlKGpa7Urz/jlfDOXK1hH9Vev3gRGH9iVBBuLlPO9gSO:uAlKGpa7UrLZRIzGBu49O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785658034, "uuid": "bb9b628a-ddd5-4e4c-ab9f-a424549f391b", "value": 1492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785658034, "uuid": "21daac15-85d7-4912-9749-e003a0be70a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b43cf01-8e4b-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785658919, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785658919, "uuid": "a68e56b2-5e8c-423d-bebd-20d474678997", "comment": "Malware payload", "value": "d1057f25411252f22c3d0ee83ecebb9c", "object_relation": "md5", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785658919, "uuid": "dba33adc-a922-438f-a684-cff3a2bdb9fc", "comment": "Malware payload", "value": "a495cb6ea1fce0b4a006562dc2e8d5db918acbf711192e10941fea612f792c20", "object_relation": "sha256", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785658919, "uuid": "0f89fc1e-01c3-43fb-afa6-0452c9c5477d", "value": "T105D5239AA9F41970D467C379EFA3F46EB02A7B554B60CE5BF6CC6E108A1349810373", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785658919, "uuid": "21569a64-5678-4a53-92cb-3220ceb982c6", "value": "f5bec796b7b3c2932293afa8281cdeed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785658919, "uuid": "d8f1ce57-814d-4228-863b-613d1c44fd7e", "value": "49152:W4yETHLzsua/GpLAMl7Idjraw3l/ewelvlThdN8RrAxHcOn6isuyb:WjWkZ/G+Mp4jpewAv9hkrAxHcOn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785658919, "uuid": "c5a31b6a-a8a6-4123-bc85-9bb8b023e3b4", "value": 2903040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785658919, "uuid": "4f247451-25b7-4406-836b-7b5bbf3f90b3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f90527fb-8e4b-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785659237, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785659237, "uuid": "af008e60-9f84-48d9-b77e-0e1a1e2553a3", "comment": "Malware payload (Mirai)", "value": "7de3a227eb3ad974429898960349133d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785659237, "uuid": "a0411cd3-597c-446b-b9c0-251650c6c6f2", "comment": "Malware payload (Mirai)", "value": "bd570ac073065d3b7348817717b5603b3b62118fb419a3c1f279745ce7d6b15d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785659237, "uuid": "cf502ee9-4090-443b-a9e8-397a46aa807b", "value": "T1AB03E16FF9C47897CA2B4DB5860907754D00726212CFCF4BA6531C8CBBA948AACCD8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785659237, "uuid": "d9c6f774-604d-4e10-845c-b3e1d52ff7a7", "value": "768:5Joq+Ugdom7Wdfl2hj/gVsgoFqrrDhd9mvINebKD1Wl7:0dHom7cqo+TForDhdEI+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785659237, "uuid": "86992d9a-370a-4d82-b316-38b674725061", "value": 38316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785659237, "uuid": "d23c6bbc-b5ee-414f-aab9-9b93f53f115f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1785664884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664884, "uuid": "811d065b-b29b-4201-ae77-73fee2cfa61f", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664884, "uuid": "e4d90e6d-2eb1-4c2c-9e14-43dcad5d634f", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664884, "uuid": "9a6fb487-bfb7-4abb-985b-be1d1f53e79c", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664884, "uuid": "72072065-9734-49d6-8a20-47e69f6edc58", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785664884, "uuid": "f1ec49b0-c9f8-41fb-b438-431beb9d5a7d", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0c61779-358d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1785664902, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664902, "uuid": "19125bd2-70fd-434f-94d4-f78dc0959c3c", "comment": "Malware payload", "value": "5294f25631d20b68ebf3a9acd4cc1f5d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664902, "uuid": "48c1e1b5-9255-48a6-a5ad-4dfead015415", "comment": "Malware payload", "value": "a505de0af54408dcde2f869608398a409908543a43fad15397a342b2200f8a52", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664902, "uuid": "d60f2582-0d2d-49a8-876e-774ff47ca89d", "value": "T19E06331581EA41EC80D88DFC9D152EF38F55EDF028FB0484A9F7E69208F79D297929", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664902, "uuid": "5710c1b3-0330-47dd-94c6-3d16d1929dbc", "value": "98304:zenAd0WS0Zelbevq7hwc8UthyhjeomOwsb3Pu:zenAd0W5ZwUJxhBwMu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785664902, "uuid": "dd98ed32-91fa-4440-be13-fc9e577f9e9a", "value": 3716336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664902, "uuid": "d95c2eb7-3be3-45ef-99f6-a6508caaef75", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17c2c29d-8e69-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785671744, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785671744, "uuid": "9387abbf-0a67-46ea-8b53-4da03e0236bc", "comment": "Malware payload (Mirai)", "value": "a9ece8aecd93c3fb125d6fe83bc17be8", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785671744, "uuid": "84865a73-7b5f-45c8-a5ff-1f212e70c0a0", "comment": "Malware payload (Mirai)", "value": "0a47d48907b08fdc0e946983ec981e348468e187ba576152a10d27c418559310", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785671744, "uuid": "430727a3-c11c-4df5-ae27-52afdaf250e9", "value": "T14903F26781E78ED691626D32E88D894133CF0FB183F8777B1095367E38C6D876AD26", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785671744, "uuid": "05e11b60-5144-4bc8-9fbb-8e4a3e13096f", "value": "768:rLNER5y2XIBPhsLFzWjCMLfTzNUunx+plfBVBHjXhbd9q3UEL84:rBER+PaLFz+TpU6+lZjDXhELV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785671744, "uuid": "c3b811ef-66cb-4335-a21c-acee0aa4eede", "value": 38164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785671744, "uuid": "caa0f332-3e29-45b6-9f9e-7c7632427752", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1785672251, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785672251, "uuid": "f7dd4521-f6d2-4919-9290-e022942c7109", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785672251, "uuid": "e338b128-6df2-432f-8ddb-19e131f58499", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785672251, "uuid": "44d9529a-8126-4998-ac44-e612730c710c", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785672251, "uuid": "15a65772-7133-45a1-96e5-7bb9530a4bda", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785672251, "uuid": "7ce51a56-0674-4006-bb57-fa7deab17d86", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec18b6c0-8e6c-11f1-8d7b-82aee05be84a", "comment": "Malware payload (AnimateClipper)", "timestamp": 1785673389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785673389, "uuid": "70678425-4a57-4cb3-a69a-8c09c6f30b9c", "comment": "Malware payload (AnimateClipper)", "value": "bf50325f1dbd215e1c734c00b251789d", "object_relation": "md5", "Tag": [ { "name": "AnimateClipper", "colour": "#63d9dc", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false }, { "name": "e3aaa940c8c30f0571cc42a6e9260f60", "colour": "#195fdb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785673389, "uuid": "b1dd70d9-de8a-456f-9e5a-4ec01445f206", "comment": "Malware payload (AnimateClipper)", "value": "bc9165c426258d33799107d41a1e692504d7e69e02762475ab3b8cbcd19d5d40", "object_relation": "sha256", "Tag": [ { "name": "AnimateClipper", "colour": "#63d9dc", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false }, { "name": "e3aaa940c8c30f0571cc42a6e9260f60", "colour": "#195fdb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785673389, "uuid": "2f65c905-177c-4c5a-85d9-3d80fcb13bc1", "value": "T18135BF15A3E401B8E92BC278CB9A4233E7B274551774AACF0759EA553F33AD06F3A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785673389, "uuid": "1888ab74-4202-4a51-aa8e-b5489a2c99c9", "value": "8c0ed5311e0eeba51b4c1a13e4263081", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785673389, "uuid": "ab2c9b61-480b-4137-b7dd-36bfb79499b6", "value": "24576:lC0Pf7dNvVC2cuWnd/ewT96mCTucMVvu8QmCgFqk:lvPfanHT95wpm9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785673389, "uuid": "5974a476-7b39-4afd-9cf2-f907a0e8c069", "value": 1158656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785673389, "uuid": "0bc98d37-63fb-4bdb-a7c1-0a86d7387b7e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c85a9fa-8e6f-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785674383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785674383, "uuid": "ac2dda1a-a49b-4068-beb0-ceba2335e58a", "comment": "Malware payload", "value": "2a76642e27222609fe79e0ac037a75d7", "object_relation": "md5", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785674383, "uuid": "0624d5b1-8c9f-457e-a22b-bd30764afb1f", "comment": "Malware payload", "value": "83dba12b70e10ff9cd75ec1ec133b9f520988d5351e8c60d59abc078bfb04109", "object_relation": "sha256", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785674383, "uuid": "29676c18-b59b-459e-8668-57702af165c7", "value": "T1B8D5229CFDF21530E833C3FA45836AADB12937808AB14D5B66CC9B546E636082C793", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785674383, "uuid": "38ecccf0-ff16-43c7-b0d8-5dce98dff6a8", "value": "1799eb3c1092391ae174afa4eee4cba2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785674383, "uuid": "b32f3dc5-9b79-4d39-b0b5-460aacff697b", "value": "49152:+/9TXohz3ZQ1AuwxNtmDf7er4kQ7dS3ZEXOm2f8q/fGNrRZDW7CG9lA8fvRpBB5L:+/NXohzBDmDvs3WXOBBG1LD0/DfBJIUb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785674383, "uuid": "37adba98-959a-4d2e-b9b7-13c139b868cd", "value": 2948608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785674383, "uuid": "ff5911a3-68ce-463a-b187-3de6c54a1568", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d64ee36-8e6f-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785674545, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785674545, "uuid": "953a9a32-e79a-4f27-9ffd-e14b0a55ff29", "comment": "Malware payload", "value": "26869cd3e64c67cd34c2db399a38e784", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785674545, "uuid": "c14794fe-1175-4202-b8cb-eabfb3f1f020", "comment": "Malware payload", "value": "426b4376bb5ec406e676bc36a8b7b79b9d731055193c34a64ba0ad941d521d0f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785674545, "uuid": "0d39d1bc-ffc8-4408-8ce0-783bec33ae94", "value": "T117015ECAD130981040AAD4AC2AA75095F831C3C3171B0F79BF6CA83DEB88D00F066F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785674545, "uuid": "8fbb6add-f370-4d23-8a97-6f896f981020", "value": "12:dOXOsYxcysE+vhCFN0zvy/RQvZowHkaoC3nuXC4pWFHXCUHabM11C0rCGD0X:kXCKysE2hi0ziQvZohaoPXnU3mILcX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785674545, "uuid": "ef52a61e-e7a0-4300-83f7-00dc9c6f585a", "value": 840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785674545, "uuid": "70b147c4-7ec1-4395-b9b1-17968e5ea284", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e42383f-8e70-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785674869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785674869, "uuid": "d9f3e108-ea58-4930-80b2-ab11f0a5eb99", "comment": "Malware payload", "value": "4d9882f3ac28fd35325a9b3e9d0c1cde", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785674869, "uuid": "2d5cfe1e-11f6-413f-95a7-e94649bd5742", "comment": "Malware payload", "value": "027d102df3e41d2f9ec01de10badfa3f671231d2797c3d219d0f77eb2cbfc363", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785674869, "uuid": "6a41151f-fef9-4354-bbff-b250d965c6df", "value": "T1B7D3A55EEBB2317572178308FAC1F728566DC243EA011EF6BDB5E158DBC229601B36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785674869, "uuid": "69fe23d7-a02d-4a95-84d6-5c709621fd47", "value": "768:4ZdapEbrTREsc4xzlURXGRNjcXscJGcz74k/tHcmDDDA40zqyhJg+prA0:wapAr5lURr4kDD3A4Y9hJgen", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785674869, "uuid": "27e8b8dd-5542-4f03-8950-a3fa133ddf5e", "value": 135765, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785674869, "uuid": "959e0efb-07ed-4554-a4a4-437d1566b3df", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c0e5088-8e73-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785676073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676073, "uuid": "7b1096eb-b2d0-42cc-a241-b636204071e5", "comment": "Malware payload", "value": "1cd3d12fd3102ed8d46c3ed151fed722", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676073, "uuid": "7c0186a8-ff7e-492c-9b79-7014062879ab", "comment": "Malware payload", "value": "07c1e3de8f2346a60540a39925e97ba4f9825b74ce249fdfa8ebb69fc3804b43", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676073, "uuid": "686cccff-1617-4b7c-9188-75bbb2b95a3d", "value": "T1C601CEC6D230A5105029D89E6BAB55E0B821C3C7475B0FB87F9C943DFB98D00F066F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676073, "uuid": "f6cadfc0-ab0f-48fd-bdd6-ee5175caecb1", "value": "12:dOXOsYxcysE+vhCFN0zvy/RQvZowHkaoC3juXC4xsFHXCUHa01C+rCGDwauD:kXCKysE2hi0ziQvZohaoxXbO3mGvY7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785676073, "uuid": "0241cbdd-518d-40cd-a910-158cd8b28eb3", "value": 831, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676073, "uuid": "ca4f2369-7bc0-43f5-a965-f7cc8956ef84", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66f9acd0-8e73-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785676172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676172, "uuid": "195ca4a9-20e8-4f7d-b1d8-9b844bb48321", "comment": "Malware payload", "value": "6f701f4ef17ac6ede534f164f5be01d5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676172, "uuid": "3a4e9e61-c244-466f-94a8-8c44873da6e5", "comment": "Malware payload", "value": "c023317e2a84be5484dfdf820ce963799c30b629823f508b78b6d420f2b6f01a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676172, "uuid": "748fc84c-cc88-43be-ba65-be2bc7892a07", "value": "T1A663E873B8C6182A311F028F6107732C75BA99D6DA01D9F1F6F661285BB4FE136E32", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676172, "uuid": "913afeed-0084-49b4-aab2-978f5257a609", "value": "768:uNZdypGVU1pupU0nMF/FbD3tx27p+EeLSJb9ee7xEqasPWuo0sCy:uFyp4UKMpxD3tx2VDeLSJbnEqasPW/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785676172, "uuid": "66eaa289-9be4-4bf8-b798-b0e0f9767442", "value": 68560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676172, "uuid": "265352d4-5d52-4d60-a29d-2f27f1324847", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "290d8d92-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785676927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676927, "uuid": "bf757a19-2091-4281-97ed-17911634fb6e", "comment": "Malware payload", "value": "ab9a2c07b3b1222f5ada4cb7c1fd144e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676927, "uuid": "78404dd4-feb6-458d-9e3a-9a81bba1bdf6", "comment": "Malware payload", "value": "1404090db3128de503ba4d991a960c7c1bc3b910a62d06ecf7e7081a2fcf11b9", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676927, "uuid": "5a5271f9-2752-4d6b-87c9-6fc8cdedaaed", "value": "T115538D4123F80B16D9FF5E39B5E2A5250EB0EA039441E7AE1DCDA5DA0E537806B603", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676927, "uuid": "a01f0ce5-0071-49a1-b50f-70af7a39982e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676927, "uuid": "9985b815-6627-415e-bda8-bf5db5da6ef9", "value": "1536:7bHOH2MJv6vmDtyQXIE+TC49IfXWbdS79GT8H:7buH2MJDyQEASSB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785676927, "uuid": "2ae858fc-26bd-4783-8658-8531a81e834b", "value": 61208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676927, "uuid": "f39ac7f9-b41f-4bd3-a074-d0c91149d16f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "292d426c-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1785676927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676927, "uuid": "40e342b6-487b-4fb5-a6be-e8343dc726d7", "comment": "Malware payload (ConnectWise)", "value": "130176db1b368a8290ebda3ce17db7c8", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676927, "uuid": "43fffc0b-c191-4835-a18f-36b515456313", "comment": "Malware payload (ConnectWise)", "value": "13f8cfe4648b807a0cbddd653c75254b60d1951e11e715f4e5a1a2c9ab29360b", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676927, "uuid": "779df8e9-87af-4d27-b4af-2a52f169065d", "value": "T1C683E58235762631DF85C5379492C9B59D366F22133DC5BD2DA2FE3A69F03043A8AD", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676927, "uuid": "734f609c-1134-4419-ba3c-1f54aa29eba7", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676927, "uuid": "f4c2d847-b294-496d-8017-b8c1496c6d81", "value": "1536:Mtypl44jzbHI5kLP+VVVVVVVVVVVVVVVVVVVVVVVVVC7Ky7ynD:3rfukLdOyWD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785676927, "uuid": "ef99a115-06e0-4bae-966c-ad246a1fec3a", "value": 81688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676927, "uuid": "1ff280b9-8ec7-440b-8a83-ae177382db91", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "292e356c-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785676927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676927, "uuid": "626726f2-9018-480d-94e3-83f34934fac4", "comment": "Malware payload", "value": "5d4be679ad5c4bfb5144f381d3308ab3", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676927, "uuid": "ffe1a0e4-39c6-4859-b51d-cc8967c695e3", "comment": "Malware payload", "value": "319ba24115e64ea4b714caf4e88d3d5a658defd51d714c2291b9758466925281", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676927, "uuid": "f733dbd6-5928-4be9-8019-a581467a1485", "value": "T1B0633B06E3F98A7BC9DF5F7878B5B0450EB08A02E062FB989CC9A5D71B537C119053", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676927, "uuid": "8c2c129e-4fe5-4800-ac89-5b6d6758b9d8", "value": "dae02f32a21e03ce65412f6e56942daa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676927, "uuid": "7b289c60-0efa-40f9-9593-7737e6ae3c07", "value": "768:c3gaRdcdsmzKWOWXlhh6Eg/6QhvoTVcV7K0c4RelfyQFVFlCtskxZgVfS8EX8bED:tCsKWOGmEgLhvoTVF0JJQFVFlPasbg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785676927, "uuid": "37a36f1b-e3d6-4d78-8ab7-c52c78b8afbe", "value": 68096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676927, "uuid": "f8fb2c61-30ce-425e-b1ee-ab4c62851b3b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "292f0bd2-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785676927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676927, "uuid": "9d8e1963-d678-4101-b29c-6a2b62731df0", "comment": "Malware payload", "value": "752d5cdda2a1d93d27e38f98a5d23fc2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676927, "uuid": "02c4ee27-0532-4f48-829b-c999e2f89a56", "comment": "Malware payload", "value": "f048400c23add8c75abe189393d33c873c02c74eeaf43d47b950c8d643763b35", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676927, "uuid": "dd14f478-8ccb-4092-a2c2-119e68a392ac", "value": "T1E8935B13B5C28872D473093158E0DAB49A3FF9215E61DEAB3798022E4F741C1AE75E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676927, "uuid": "b85c6a83-a8f4-4e11-a3ce-74134773c24e", "value": "5f510e22d141c137199e2ff4021a57be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676927, "uuid": "08de4462-2a04-4575-a642-a05424b8ca0f", "value": "1536:wg1s9pgbNBAklbZfe2+zRVdHeDxGXAorrCnBsWBcd6myJkgUU0HMQ7oOgU:ZhbNDxZGXfdHrX7rAc6myJkgUU0HvMU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785676927, "uuid": "866c0aa2-3cd4-4b7e-8331-525ec2c32d4a", "value": 95512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676927, "uuid": "c6b5c4aa-80df-409a-8334-2e245d29ccb2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2973b800-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1785676928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676928, "uuid": "1079db40-bb54-419d-8b20-9698c7f5e21f", "comment": "Malware payload (ConnectWise)", "value": "9562334dd9a47ec1239a8667ddc1f01c", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676928, "uuid": "ad86d1f9-6ae9-428c-9ba5-6c404351f24d", "comment": "Malware payload (ConnectWise)", "value": "b80d07610b81bddb3d7f30a207a2e134b559e06b8440598a926f3a9c1d439218", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676928, "uuid": "a72a38c7-7391-4e20-847d-e99968e23c46", "value": "T1E7D46C2273B88A7BD9BF0779B0F21C2557B0E8436185D78E49A4ACD91D973818D0E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676928, "uuid": "558fe050-3497-4e12-9f43-fe51c43544fd", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676928, "uuid": "635e04cc-17fc-4669-b303-595453a5e6ce", "value": "6144:PTv8K3EAggQ2nqBly89VXvJthenrMd+3OsJwEKbE00QPG5YgRtAcCI2/R4IRtNup:rUKt/sXvJqu+3OsJwrbE00QuHRgNNmAq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785676928, "uuid": "08ce1f2e-865a-4ec0-a4a8-59e259a56111", "value": 608024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676928, "uuid": "28379fb7-7f91-42de-b25b-73dccd7bc05e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "297a83de-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785676928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676928, "uuid": "2d8c6f84-2fd3-42e9-b533-2eea49eb6673", "comment": "Malware payload", "value": "7ee2543520d72fd54827f3d11a21ef8d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676928, "uuid": "533b6bb6-5bd7-43b3-bf9e-3581364b68c6", "comment": "Malware payload", "value": "6526705b685c2f221a6675118c73cba98c47d948169d81ea4544c3e3336b8f2b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676928, "uuid": "2a37f341-a345-4259-a8b9-023fdb312215", "value": "T122144B8633A94E36DA9F5D73B46060358AB5ED066023E3EE5E04F9F61A733408E553", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676928, "uuid": "7fe00325-9f00-4576-8f95-672e32a92a39", "value": "dae02f32a21e03ce65412f6e56942daa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676928, "uuid": "448e8086-b820-4456-9963-c30e3155e2b8", "value": "3072:FxLtNGBlIyS7/OvjusqVFJRJcyzvYqSmzDvJXYA:ftNGBGySavqPJYnqSmG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785676928, "uuid": "8b7e0775-6df3-4415-a311-2d2481d3db19", "value": 197120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676928, "uuid": "a065f581-297b-4e04-9b1c-e02bd3b5aa51", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29a29392-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785676928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676928, "uuid": "a5d63256-9246-4382-a21b-304241ec683c", "comment": "Malware payload", "value": "1db8b9fa0bdcbfaab807f715c288c19a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676928, "uuid": "0bd3fdb1-52e0-48ad-8cc2-1255b99af8be", "comment": "Malware payload", "value": "b8100e5ab07983cbf82d721cf719576ca3f60e352628dcaabd42d428011fdedf", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676928, "uuid": "e4049af5-a1e6-44fa-b81b-ff8bcc8e64b9", "value": "T144C47D9233B48B2FCABF5B7BE42454980770E901F209EB5B1AD6D4BC5F633854E412", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676928, "uuid": "9f23a2fe-210c-4b94-b32d-a4d621db0831", "value": "dae02f32a21e03ce65412f6e56942daa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676928, "uuid": "42bee073-3f6d-4810-8a63-3caafe64c833", "value": "6144:SfoUrkyyvsbvpSLmwJUoqnoezGMZf1y99tg03Xdedu1h+xE5vce/6OdCatxq/trJ:SfpkywYszKoIzGafzece/6yx/Oek", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785676928, "uuid": "65e172f5-9241-45ba-8a44-731588ecd09b", "value": 550912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676928, "uuid": "a560ab96-29f3-461f-abbb-d66a2f132b67", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a0ed847-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1785676929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676929, "uuid": "3758a177-e577-49d6-97b5-c3195f3c0440", "comment": "Malware payload (ConnectWise)", "value": "94216eb90ca53fbb175f0ee6adbfb663", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676929, "uuid": "afcf1fe3-0622-436f-b963-7f2316c0d272", "comment": "Malware payload (ConnectWise)", "value": "da29455a64858fda773319c32c0a6cd40edbe8042ed005aa2befb8a4f0fb0522", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676929, "uuid": "4aec2743-8b85-41a7-8f6e-dca0b0e520da", "value": "T14B85BD41E2D364F5D46B047888BF571ABA743C040325CAFB97D4AE3A6D33BC09A367", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676929, "uuid": "4c5a4b09-d84b-472e-80be-1c0c8592080a", "value": "dae02f32a21e03ce65412f6e56942daa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676929, "uuid": "cf5ef01d-03c6-4478-86b9-19f257d7c832", "value": "24576:VDhFj+Ifz3zvnXj/zXzvAAkGz8mvgtX79S+2bfh+RfmT01krTFiH4SqfKPTsUTHs:VDhJkGYYpT0+TFiH7efP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785676929, "uuid": "00c14632-0869-472c-8200-88ae8f0c2946", "value": 1729024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676929, "uuid": "edc65e5c-90e9-4ec9-8bc4-6157673b569a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a22ccec-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785676929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676929, "uuid": "d73eb0c4-d4b2-4215-8589-3b101465c741", "comment": "Malware payload", "value": "dca6afeddc135645ec068160a47c9510", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676929, "uuid": "1531cd42-1896-415f-b89f-a5ded2bbb320", "comment": "Malware payload", "value": "edc4460d3dd2fc1fcae6c617c8d2728ce311e8cd47f2d6a37d719b924c2ac868", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676929, "uuid": "873dc95d-3b32-46dd-ad36-c385e1bd67dd", "value": "T185668D2F611403ECC86DC63984CF2199F56035685338AFEFB2905B211FB6AE46FB96", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676929, "uuid": "7f57e75e-cc62-4a9b-8e4f-48fd41b5005e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676929, "uuid": "5cba9d1c-40e1-4f65-bc7a-79917f82723b", "value": "98304:Fa7im/aOxHSGYKOKaPuWn0yMxnTq0dKtxaEe+5HX9iOEtYsJw:Fa7fauH/NOKaP30dlTps28XQD+si", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785676929, "uuid": "c59b4981-03b8-4c18-8ff3-06808d2dcbb1", "value": 6972928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676929, "uuid": "824aad1b-6acf-4201-b422-c17821a3aeb2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b9e5760-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785676931, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676931, "uuid": "17ceb4b9-a0f8-4441-a879-df32b800ed97", "comment": "Malware payload", "value": "dcb6399c2a8ef6fe03d6ca0670268591", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676931, "uuid": "c2cdffd2-e567-469d-9002-a9e73c76157c", "comment": "Malware payload", "value": "21ab822206407d6bc66d1a2a0f81262e20274368d4eaea3f60ccc2753aaedd88", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676931, "uuid": "9fa9def8-b2db-4bad-8f63-0a35d158fafb", "value": "T1BB94293B36998E25C2465372C1C7494087E79A476BABF70F358413DA2D033EEDA4A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676931, "uuid": "42b8de9e-3c04-4700-bf18-4feb4102e2ec", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676931, "uuid": "16bde821-2c83-447c-b426-2a54563bae7f", "value": "6144:tQGi6rZvFmr2b3RjFIx0Wm1rYVfnoJZYq:CCrPmrIj40zYVvosq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785676931, "uuid": "81d1b488-aba7-4073-91e9-1549e3bbedd0", "value": 423936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676931, "uuid": "9eefca17-b894-43ae-8bfe-a222a3d7a5cc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c3bdff4-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785676932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676932, "uuid": "9db163e1-63bf-4d36-aabf-545b137d6ae2", "comment": "Malware payload", "value": "ac458ece671fdde066ce60e448f12bc0", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676932, "uuid": "2eb4f870-168f-4bdd-a2dd-c633c4556a4f", "comment": "Malware payload", "value": "001816f728d96a823a88e8243cba32486ff0207c123628fa767073bb4a49cd6e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676932, "uuid": "200ad4f8-9e41-4b0a-baec-af440e64eb3f", "value": "T19D569D26B7A400E8C87AC53CC6469513F7B2B81A53B0A7DB17B4967A1F336D41E3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676932, "uuid": "2e558381-28ad-4d4a-bae7-a70da50f0b33", "value": "3a3643ded1fedfee82a3324c3db3bf43", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676932, "uuid": "ace8ba61-3c62-4220-8eb2-4e0c0c93bac6", "value": "98304:N36U0mJMOqh9s03ZMza32r4vQmI4eXUMltMQXfPJFWNNrgs4u/EKgIymvloXMPwn:NL7y5h9FcJFwrgDu/nGmv6iL0Qg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785676932, "uuid": "56033db8-5112-4024-aac9-9586f648ce5c", "value": 6455808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676932, "uuid": "78e2e8e7-6d25-4106-b8b7-346e2e2f325d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac026ebc-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785677147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785677147, "uuid": "10980cff-a2b3-479b-a26f-1ea75e24a256", "comment": "Malware payload (Mirai)", "value": "292409d9644234a18929dcc5e7c62ca5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785677147, "uuid": "dc2ff37f-8052-4dc5-9622-fa36db2fe8d0", "comment": "Malware payload (Mirai)", "value": "3f97e89c7969f3b91d47fa62ef6c6e42bc7c820ab6e798bfdab97149cd923fbf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785677147, "uuid": "330c6de5-47f9-434d-9e0d-c3225808a08a", "value": "T17E833AD7F801DDBDF80ED77B4453490AB231A3910A830F3A6757BA67ED321A45826E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785677147, "uuid": "19c8b5e3-726a-4bbd-90b2-ec73c1ac6beb", "value": "1536:ZjJGU3HNqYvQtGuNM6W8FwGXAyy/QKYVZJfC4IpehmFVbVXHtA:pJG8fYtGuNM66X9QNVzDhmFBZtA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785677147, "uuid": "26d0c6e6-4535-4695-ae98-0dc0e04c1c0e", "value": 82080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785677147, "uuid": "a3d0cdf8-2fec-4ba4-b513-241492369101", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db993314-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785677227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785677227, "uuid": "c56ad2b1-3077-445a-aead-702220a93660", "comment": "Malware payload", "value": "f6e0eb117a3f37451583f0ebba919835", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785677227, "uuid": "7330ac78-471c-41b7-a02f-59bcd19e978c", "comment": "Malware payload", "value": "bdd60aa41bc89ae2bc06127980a8825134221cee8dba6ff8ccd94b737fdc2b5d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785677227, "uuid": "f2d5599c-a6db-46b9-b22d-dc66d2a5b475", "value": "T1B3358CC7EF05E866D5F686378376467A56064C684B93D3831AC9B33C0DB76D08BC9E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785677227, "uuid": "f7cfa2ab-e95e-4926-9651-c6e74d1fa94d", "value": "24576:LlYJT22qJYFSPQeCwwTvnn4zVm3Zj8ZfZtT0XfZYI:ZYJTVsoeCSkSZfZtxI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785677227, "uuid": "c0913546-2b42-474e-9b3b-492459853c78", "value": 1107345, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785677227, "uuid": "c0b1e2f6-b4b1-47b1-b6e3-9c4a85c52c7b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcba0279-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785677229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785677229, "uuid": "4181d4f9-0e65-4dcf-9a8c-48a4cd751219", "comment": "Malware payload", "value": "23c020a418893ea314e1ded07cf56567", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785677229, "uuid": "edca4cc9-7230-44d3-95fd-6f63a1474d7e", "comment": "Malware payload", "value": "9af13f98f079e2362c52375c9abc3816da6be8904e7331b42913dc03773d721d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785677229, "uuid": "381cfec2-0279-4f2a-afea-faa4b13102cb", "value": "T18ED1252B7ABE5A3B1181D8E67B6F1481BC3971578C103EDDB0BEFE2C665068027EC5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785677229, "uuid": "1385fe61-19a0-494a-8e4a-b4232cdd5851", "value": "96:ou2x5zjwWFPdRS4/MUk9RUMnQlkULf0ELwEEHsVFLuPLMuyc8k99ZKnj:dQ9dF1wV9RVnwbLfJwEEHIULHych9k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785677229, "uuid": "554bbf51-bd8e-46a3-9a33-671f138c6d15", "value": 6511, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785677229, "uuid": "a7e12514-2f7c-4a6a-9e69-0f34d35f1ab1", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "deb9419b-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785677232, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785677232, "uuid": "7ed85b1f-56d3-49a2-9b0d-0a41eea0895c", "comment": "Malware payload", "value": "e3bf6b7ebded22e3403e71575bc97ec5", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785677232, "uuid": "1557ce5d-1f68-4fbf-8e40-6a267e90fc74", "comment": "Malware payload", "value": "caac25321fb3b2ec530de8c37fd032b560885dc487f72f72a861ec9c20ae33f9", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785677232, "uuid": "d5d82189-af54-46c2-a8d0-335be9198042", "value": "T15C36C027B384643EC06B1A394827D314993BFA703A139D5B67F49D6C8F35940AE3A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785677232, "uuid": "52dce6e4-c8d5-41a7-b9de-0095ff38e3d7", "value": "1a5ad9ae5d9a2a6b6f1f886640a0523a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785677232, "uuid": "b7e21ab6-e33b-4762-b8f2-86ca3e43a59c", "value": "98304:SmKmn0WMQ9mAHSvQF9QtdqBqJlQ0twTbUijeN0:SZW0IDCSQtdqcJqLbUdN0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785677232, "uuid": "4e25f338-992c-470b-b68b-62eaf8465bcc", "value": 5142033, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785677232, "uuid": "69c07620-b8f5-45d3-b73b-40f3497ef366", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7945c2b-8e77-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785678025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785678025, "uuid": "6ccb6cd2-2af8-4a59-b3ba-e76aca029a1e", "comment": "Malware payload", "value": "492b952c970d29ac3bacf2b405b10483", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785678025, "uuid": "93aa5862-d9f6-4ce8-a1cd-399ec2c6f3d8", "comment": "Malware payload", "value": "a3b5d2e480b45e7b3797cbde87329ed3c2692bf68ed9e4e5dc7d5cddf80060e2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678025, "uuid": "62eb97bc-5e6a-405a-9b2c-f8eb057b1b5a", "value": "T158B186234829AC721157CAA4B146772DC4EE8277F342C75A72FD815C9BD3DC281E37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678025, "uuid": "0d67f398-72ed-4878-b442-264f591bec18", "value": "96:MJlH7n472wO36VvLb9NE0kNUmgHwrSUx9PGaq/GNt7sGgExml51pOT1pV8Q3O3NZ:MvH7n472wa6VvLb79GUm3H9PsGNt7sb1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785678025, "uuid": "57c6ee39-e773-403f-bced-6dbea9d43931", "value": 5413, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678025, "uuid": "75f83452-fe5f-43df-b5d1-f73a6140fe95", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c13f06d9-8e77-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785678041, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785678041, "uuid": "2d97b215-9aac-42ad-823e-1ddadf368956", "comment": "Malware payload", "value": "0bc74c97922568e53025bc6a864fd98c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785678041, "uuid": "52298512-380b-4a8a-a831-7b7351dddb4c", "comment": "Malware payload", "value": "f9eafba13c48bc1ad46af4a00f03191f2e0c0901b184c051d27e43ea59dbe5c3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678041, "uuid": "90fa5b8b-03c4-4a34-a802-14f2f75705c7", "value": "T141931871349F152A166F836F80427A1CABAD85DBC6019AE8F8FD51195FF0D8933A36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678041, "uuid": "26e84a50-daf0-44fd-9b43-8b7103d5caa5", "value": "1536:dVypTp7uwMmAIa14oXWgshepfV7tb73qsAxCuQyG8B9SItotraRLfh2pupUmGxj6:dQksq/dyG8zSItotraRL0pupUFxl8J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785678041, "uuid": "5ca711a3-e3f2-444b-88aa-cf92252d76fc", "value": 91649, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678041, "uuid": "f8bdbec7-8092-4158-87e7-273542200070", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6fe50cd-8e77-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785678078, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785678078, "uuid": "388b9bb6-ee05-40b3-8e3e-27df12fda25e", "comment": "Malware payload", "value": "1624653562c9ff26efd51ddc2d9d71eb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785678078, "uuid": "a69d0f2a-eb73-421a-8fc2-2045ba31b96c", "comment": "Malware payload", "value": "2a611000dc6864f11423380d325e0a699cc88d994bc9a6b07cec607f758ed5e6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678078, "uuid": "80e8fc2a-15e7-4101-8190-bfb09a2c8251", "value": "T15DD3A55EEBB2317572178308FAD1F728566DC243EA011EF6BDB5E118DBC229601B36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678078, "uuid": "f7b7deaa-597c-4db1-ba05-c139582a90a1", "value": "768:SZdapEbrcREsc4xzlURXGRNjcXscJGcz74k/tHcsC1kF40EOrhYTrprA0:KapArYlURr4kVCiF4BahYT1n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785678078, "uuid": "fada9a81-7a4d-4ca0-906e-9ad0c9d38355", "value": 135744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678078, "uuid": "a2e553f6-dad0-4168-b81a-105045cb2d8a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "956c8d80-8e78-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785678397, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785678397, "uuid": "45e5e1b6-382c-4c07-b0c8-2f07c9a12452", "comment": "Malware payload", "value": "f2fcb4577d4105a0cff8cda9c5b88381", "object_relation": "md5", "Tag": [ { "name": "134-122-189-74-8080", "colour": "#55b6f7", "exportable": true, "hide_tag": false }, { "name": "134-122-189-79-8080", "colour": "#1e6598", "exportable": true, "hide_tag": false }, { "name": "134-122-189-98-8080", "colour": "#7b09cd", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785678397, "uuid": "dd7c4313-aa09-4d10-b672-c41fac36efae", "comment": "Malware payload", "value": "b17b7bc989b0e1b918ea1aeda1f758e02f1d4ef5e3a03c4f2a2f8b05371df7c0", "object_relation": "sha256", "Tag": [ { "name": "134-122-189-74-8080", "colour": "#55b6f7", "exportable": true, "hide_tag": false }, { "name": "134-122-189-79-8080", "colour": "#1e6598", "exportable": true, "hide_tag": false }, { "name": "134-122-189-98-8080", "colour": "#7b09cd", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678397, "uuid": "dbfd035f-39f4-4c96-947f-ff374ed95e7c", "value": "T1DDD633E26B5104B0D6A7E3FE0A115A2E8333B8631774CBDB437CA91A5F431916E3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678397, "uuid": "e9e34664-f202-417e-8e83-b6f79e044c16", "value": "965e162fe6366ee377aa9bc80bdd5c65", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678397, "uuid": "b2fe9441-0e0c-4514-a411-d2efe0ad1d96", "value": "196608:10lxI0sKYu/PaQrBu51H7TQscK2pUZMAbUEO3oDDJf6Wv/VJ8KnWWo3GYg4r5Wwm:MxiQrU51FgUSAoEO3o3Jx/VJWQ4rv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785678397, "uuid": "91685780-0859-4b69-94e3-f62f0487a47d", "value": 13426075, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678397, "uuid": "201d1cbb-8c17-42b1-b0d8-875a6b2bcad5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "adf13898-8e78-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785678439, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785678439, "uuid": "c23f819e-1db3-4530-ac3a-b6dc3be2bdd1", "comment": "Malware payload (Mirai)", "value": "cba383375efd66c8900774939e4a7035", "object_relation": "md5", "Tag": [ { "name": "2-26-136-128", "colour": "#11421a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785678439, "uuid": "387b2481-8bb9-45b6-b4f2-dedfed3eeec5", "comment": "Malware payload (Mirai)", "value": "2b08a2d856b1611e827bb9adc3bec0c46757d362494068eafe0bd1c6c8398019", "object_relation": "sha256", "Tag": [ { "name": "2-26-136-128", "colour": "#11421a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678439, "uuid": "94b6b168-c0ba-4717-94de-bd06b0a1443f", "value": "T11B21ED96A7D39D17CD540277DDAF6310E322EF80818EB403F31116150C6F31A1F260", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678439, "uuid": "ac5d8467-5d7d-4362-85b3-f5e2b6ca9e57", "value": "24:JiAtVsgP9qD0at6EPbrzrUlFSy40VzLCkIdsx2BWQIbzpNfe:JPtVFFqDPtt7rkFSy4CzLwPInpNm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785678439, "uuid": "c6e7f224-f443-4750-b3e6-9ade4596eb97", "value": 1160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678439, "uuid": "bd2c7a37-966b-489e-a745-e14201736920", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed86127b-8e78-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785678545, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785678545, "uuid": "297b8ab3-8122-4291-81bb-11125071755a", "comment": "Malware payload", "value": "bc96cdd8d7bb49f8ad05007f1c72161f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785678545, "uuid": "8d7d1947-fcb6-4960-bd18-cf3cd5cdcb5b", "comment": "Malware payload", "value": "6edd069b32ec2ae24ed7ff1f2932d0b00e9937a5abff6610ded7a335149041ff", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678545, "uuid": "b80b4bd1-c20f-43f6-8ad9-62479467704f", "value": "T1C293E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678545, "uuid": "807be641-76b2-40bb-9ba1-9d6a2c42a287", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPX6IH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785678545, "uuid": "167d0e06-c729-43da-bf07-c526d4ea0480", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678545, "uuid": "09f8fd2a-1565-412d-a7ea-acfd18b64102", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6058c8f9-8e79-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785678738, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785678738, "uuid": "d1041772-6dad-4aa3-b1d5-5dcff6c20a8a", "comment": "Malware payload (Mirai)", "value": "e6019ad71a3c2d1770f686c7bac62cab", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785678738, "uuid": "5edba580-a27b-4660-bbc3-00db205920de", "comment": "Malware payload (Mirai)", "value": "3ee803dfc08cd7385b83fa53296f806f37015762c023933647bc60e8d7a209d8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678738, "uuid": "5a4927f6-7366-4f87-9db0-8cbc0f85b9b2", "value": "T18D314FED6020905316C9DE22B3B245ADA017AEEE34E88EF7FC655C325C98740F139B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678738, "uuid": "b94e3080-a2b6-43d8-a358-3bfa21833b03", "value": "24:TDJ44eltnrPf75z1VwEF0E7G/lft1h81dV5/RnTNI7DzK0NfiecFFYbJvA/xPS+p:TDJAbnrPfJ1Vws0Dl3h81dV1RnIDzF1g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785678738, "uuid": "5b77f7ab-c968-444d-bcfc-bd41fa3c2c9e", "value": 1486, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678738, "uuid": "5e0f1f1b-6894-4eac-bcc9-b8c568b154de", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac17f878-8e79-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785678865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785678865, "uuid": "cde61215-ae1b-49be-97a1-62aaa36dbf7e", "comment": "Malware payload (Mirai)", "value": "b67caef1324bf7b71264aa81ffb04c59", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785678865, "uuid": "1a7c6283-0605-4585-8d8e-2c3da19c683d", "comment": "Malware payload (Mirai)", "value": "b5e47503a197416bc1db54daf095acd81c70d5b73f7d0123aac6e212c7738c38", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678865, "uuid": "e281550e-3b08-4b14-8add-397b1c93ce28", "value": "T1A8F2F0FCE1016993EFFAA8747CC9EA22B7B6021A35CC1CD290915F045766592EF0DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678865, "uuid": "d38fa82d-9244-4831-bc2c-5fdb4926899e", "value": "768:yiO0JN+/422revGMYc3uJAF9uqICBET+44uVcqgw09s:yiO0cD2SvTTdCD4u+qgw09s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785678865, "uuid": "e30ff93c-91db-42f3-86ab-60ec65747633", "value": 34556, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785678865, "uuid": "f743e24f-87b9-4b13-ac69-653849067e56", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5c6e3f5-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1785679964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785679964, "uuid": "7e873fe7-7c48-4975-94ba-7d8c51b76955", "comment": "Malware payload", "value": "3b973286b5d06e8920aa3578a4941be1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785679964, "uuid": "a03cca54-83b0-4beb-b3f4-b2a4b4f79c60", "comment": "Malware payload", "value": "d4b125064e284d4586ccbe058f214c34ae4a973a3f276f7db1a1b1da0e9f97b6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785679964, "uuid": "4c592f73-3a25-4756-9680-904e37cd8fac", "value": "9A33024523A62EB6C57548F1A3F8FF89B14A3EA49FF55C0A7C207658A43236C28C4C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785679964, "uuid": "87769312-1326-4233-be00-3cda7e5e6068", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6EO:yYI0ARqw1qAEv7UIFM8oJorFquj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785679964, "uuid": "43749e2d-d613-4a2e-bddf-0e62e8bf1033", "value": 53576, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f29c32e8-8e7c-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785680272, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785680272, "uuid": "c5c91f99-6f77-4409-9899-1298b6bfae4f", "comment": "Malware payload (Mirai)", "value": "2f41ab95b44b6858b1ca23f9e6cb6c9c", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785680272, "uuid": "97419677-07da-461d-a0d8-c41ad009d4b8", "comment": "Malware payload (Mirai)", "value": "c91a6e3b85b511485e6d37c5e5b5329f8d111e14178ec9c1e0125f58454c08d2", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785680272, "uuid": "b69b12bc-4628-49d6-84c4-3ceb2730a1d7", "value": "T135430226BCE35A319275C23E7B758ACBB95717E460F88432E50A85B02446C02E8FB7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785680272, "uuid": "d48e3242-36d6-49b6-a629-3b3120e620b7", "value": "1536:zAISVp6FX21s7QGGIWaL7eqowcQL9zBoSHBCz:zAIjFGWTWaG6jL9tHHBCz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785680272, "uuid": "257b145d-5b9c-4429-a101-769fcc9ffb9d", "value": 60308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785680272, "uuid": "1f7d815a-a670-41f7-81a6-b96b18841284", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52311621-8e7e-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785680862, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785680862, "uuid": "22a3cd12-1958-40eb-ab27-39da34bf1add", "comment": "Malware payload", "value": "6985c6d55419c7ad3a93489d92648b97", "object_relation": "md5", "Tag": [ { "name": "130-12-182-175-8080", "colour": "#f2fa64", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785680862, "uuid": "064d6bb9-5220-4391-907a-d749c9619d2e", "comment": "Malware payload", "value": "688380a467d155f04236eb49649087845421dcabdf7672c16c7b385bba2065d5", "object_relation": "sha256", "Tag": [ { "name": "130-12-182-175-8080", "colour": "#f2fa64", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785680862, "uuid": "bedb685d-1672-4a81-85ff-f929941c038b", "value": "T1EBA60273B38AA83EF0690B31997699A0443B6E90EC124D1B96F4BC7DDF351613D3B6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785680862, "uuid": "9bf19729-f05e-48c3-b07c-3cae77ee4842", "value": "88016fcdef7f227c62171d0afad9aae4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785680862, "uuid": "e895a592-ac4d-47e1-bba6-d90aeb11f0ab", "value": "98304:UAX77sNMwSPCsMQj+avybrzJSJoUIcffg:D7sjSPCslPviNOVIcXg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785680862, "uuid": "df5deeda-4c21-4628-9040-b6aafd569bf9", "value": 10174613, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785680862, "uuid": "9f1233bc-a145-42db-af46-6dcd57aa4c22", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "261cede4-8e7f-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785681217, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785681217, "uuid": "01b442e1-c41c-434a-9772-fa66f1535222", "comment": "Malware payload", "value": "1ae733a07f59db1d3ad15b8ce1b5e2c6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785681217, "uuid": "0758728b-be9b-4b93-80b6-c021f56d05bd", "comment": "Malware payload", "value": "196c9b5a22d5873613b67981ca3c23dba7f58e0a0c89fce4036012a2bbfe416c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785681217, "uuid": "a5f7fee6-7eaa-46c7-87d0-ee12a8f62b64", "value": "T148C16176A804CD4BEC65BD4A103EBD3B54CD897B57A5CD7CA7DCCE0502025BA2F91D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785681217, "uuid": "0e14c911-dcea-4a69-8128-12264ba919ea", "value": "96:ERyDMPOYYosLvnK0gg7cCgoca2zBu7cg1xqzcfxmbcfEWtacTKEoouW:bDUODomnSa2FgnqzcJmQXmoD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785681217, "uuid": "28350d0f-11b0-4151-8c7d-b18c181602ae", "value": 5898, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785681217, "uuid": "8a27eb4b-4b4d-417b-8e03-ee104fbcd98a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38377404-8e7f-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785681248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785681248, "uuid": "ca898373-d9e6-45ec-a4cb-7f1263af96bf", "comment": "Malware payload (Mirai)", "value": "54f1b40f4e5ff75ffed8d3f65225e7e0", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785681248, "uuid": "24e59235-c5a4-4f80-8ddd-a81f7061f264", "comment": "Malware payload (Mirai)", "value": "75902d91593c074f65590e4b0098d73251b5fd67326f927aab091df798c346a1", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785681248, "uuid": "31e2b759-3044-4e0a-be4b-ae61a04a31ed", "value": "T1C9E2F1B812DF95A3D7A45CB4ADE8C1C237870630B2D7737E53289990DAC811379F82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785681248, "uuid": "70ac3ab3-33f3-4d81-988c-49b3231ae928", "value": "768:wXp9dqfwgWjizlx/00/2vgdZsvLZt9DuStTCwOuXOs3Uozw:GdqfwgWwx8NssvGluXzzw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785681248, "uuid": "dd636f11-6bf1-4d6f-b903-c8bdf98a0027", "value": 34040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785681248, "uuid": "6631b963-301c-4caa-a26a-69d932c7542c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "403dfc13-8e7f-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785681261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785681261, "uuid": "dbbb45fb-96e7-4112-bf04-10a5941af7f3", "comment": "Malware payload (Mirai)", "value": "653561c32a6890ac375dc2d80d2be6f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785681261, "uuid": "d76ecc3a-aa1f-4a19-943b-fd80d5637f67", "comment": "Malware payload (Mirai)", "value": "090dcce5eaeda80bddf9c6a3dd58da737bdf6bdb904a995eab142c37b32a26d5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785681261, "uuid": "585360c5-060a-4b94-88a3-23de4d5b825d", "value": "T1AA830220E6E1D212CB30687FD63EC3C269705BF5C6B56A4B87D8DB88D5D9440BF268", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785681261, "uuid": "e0dee2f9-97c4-42a7-aea1-26d9d8d9ed46", "value": "1536:IEQTAzwGnbUUFjJzfNeJh0TRsrZLajJ+pnO0:IELNHF7N+h0TOFLyJ+x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785681261, "uuid": "f789dca1-045a-453b-ae01-2437cf741b15", "value": 82544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785681261, "uuid": "1f015c9d-1680-4044-b2d6-915208a47d03", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "443e14a9-8e7f-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785681268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785681268, "uuid": "2e9626dc-a1f5-4d15-b801-0fa44b150b4d", "comment": "Malware payload (Mirai)", "value": "55a69506a7a8aca159a9bc29877cd46a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785681268, "uuid": "b8a34a52-d138-42f3-920c-bd0a03816e32", "comment": "Malware payload (Mirai)", "value": "407f81370bad7fcc8988012886d8a36ac39b5e713b840af0783d9147bab34746", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785681268, "uuid": "59ba80fd-6b97-46c8-abeb-063beaa77847", "value": "T16E43F122E263AC70C2304BF869ADD24931FE41E995E2701BE0538650EEBB76751C8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785681268, "uuid": "9d491ee8-9a57-4f6e-87d3-47835f99e7fb", "value": "768:OId1dRYNdmU2XF2fc3Y0Gc6in/gMhP4DaFeWhMugL8mRUhsWErhx7Nf23z26JCQA:OIdC+nv3Y/2CAB88mRU8hxmgcXTn1zu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785681268, "uuid": "e5c7b362-05ac-4095-bd4e-a3742fe8bf4d", "value": 57872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785681268, "uuid": "963ea6d8-fd7e-4967-8f40-ddc1a6d2d155", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5314abfb-8e95-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785690742, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785690742, "uuid": "32ee719d-f305-4aad-b382-467fd40837e7", "comment": "Malware payload", "value": "c680a2a162aea8539f6869778ba31a6f", "object_relation": "md5", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785690742, "uuid": "cc5691b6-eb42-476d-90ce-3b8e322331cc", "comment": "Malware payload", "value": "cc337416747a2edee389ac4093a1d9fef944db6475b75de39cf051d949f884b6", "object_relation": "sha256", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785690742, "uuid": "b057794b-335b-47ef-90d3-caf86d0953ca", "value": "T1C9D5235CFCF302B1E437C3F75693A1AEB12D37818AE44D5B768867101D532292DBA2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785690742, "uuid": "e8929501-8ea4-4c74-b1c7-89d02575d6ab", "value": "1799eb3c1092391ae174afa4eee4cba2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785690742, "uuid": "b01bff4a-4b9c-480c-a5cf-8efed1e4b56e", "value": "49152:fZnzZ/CI8qLg/3/0FS6lGyRJqQ8VBagUsHMsU2gQQVOvdDXnKb0jJ4uZxRP5jOKD:fJjrs/3cFnlUrhs6gQQV0dDXnKuNRJO7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785690742, "uuid": "edb38239-c8f8-4e0a-85c1-dbb5f6f16a78", "value": 2965504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785690742, "uuid": "c8057cf4-3ec2-4abf-9542-87d956c7e8c7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af2660ae-8e9e-11f1-8d7b-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1785694761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785694761, "uuid": "a2a87b77-e133-4c67-b8b8-f7784db821f1", "comment": "Malware payload (Mirai)", "value": "6ee6967ec03d02d3f25be3dd9a9f672e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785694761, "uuid": "a5c7dea8-83b6-478f-91a0-0f62ffabb8d2", "comment": "Malware payload (Mirai)", "value": "a2bf687d8dee6a3a4d1531a46a3291e2f17a7a165ae40647621a72322b432e0e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785694761, "uuid": "9905a738-7a42-46f4-ad67-00674664de86", "value": "T1D6858D5AF6E364BCC097C430835FD753A935F4A911227E7B26849E302E66E705B2DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785694761, "uuid": "fa13e3e0-c95a-410e-a253-99ad71e3a234", "value": "24576:tC7+cWufxGPdVHf+6YVN3JLl3UiifSJXSFi9xYv4yC28uEUyo:tJc9fxGFVFY3ZLl3UjfsXSFi9xYeJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785694761, "uuid": "3e2e7638-76d7-40ac-8bae-875547ff070f", "value": 1727016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785694761, "uuid": "fdae7312-f12c-4377-a7c1-bd2cd9db1028", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0fd2c60a-8ea2-11f1-8d7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1785696212, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1785696212, "uuid": "051a5913-f70d-4653-b33f-0fd1440d4133", "comment": "Malware payload", "value": "fadf5e32b3a9d839514320aa144a7c4d", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1785696212, "uuid": "d3b37678-2d5e-4689-858e-bc5aad29b614", "comment": "Malware payload", "value": "595d05615ebf8b29be0aa9bfe40c15c289e18e9192015a35bd0f213cefbaeb75", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1785696212, "uuid": "05075019-2a4c-4f46-b5c3-bf52d768a434", "value": "T15617AE2BB2B800E5D4B6D0BDC6575617FBB1781543346BCF16A09A6A1F23BE09B3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1785696212, "uuid": "2e982888-163e-489c-85d6-3f162e4542b3", "value": "2d56a84740f80a34bfa3fadb62ad5a5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1785696212, "uuid": "37fa3b08-7bc5-4baa-8885-93cdcc6b33c4", "value": "393216:NQJEhxKeIACS3XSJagz92zA1VFCwspCfzWoR:iJmxzLySCfB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1785696212, "uuid": "ae758e96-e6ff-4979-b6e5-172c8e25e64f", "value": 20217768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1785696212, "uuid": "df8374d2-a714-4f1f-b70a-cd7f2f2dfe95", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785629226, "uuid": "190bcb3a-8e06-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.149.136:50879/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785629827, "uuid": "7ef4ac02-8e07-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.7.132:35861/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785629836, "uuid": "8489b2dd-8e07-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.29.24:45144/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785630306, "uuid": "9ce6ce68-8e08-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_72f092cefee51b63.exe", "Tag": [ { "name": "54e64e", "colour": "#eb829a", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785630555, "uuid": "3143df44-8e09-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.73.15:58994/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785630620, "uuid": "581a1cf0-8e09-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.224.206:60000/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785630912, "uuid": "05ac0b77-8e0a-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_1489820be780f8d5.exe", "Tag": [ { "name": "54e64e", "colour": "#eb829a", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RemoteX", "colour": "#6d8996", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785631778, "uuid": "09f8a763-8e0c-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.12.49:44802/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785631780, "uuid": "0b103eae-8e0c-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.155.230:47833/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785631867, "uuid": "3ee39307-8e0c-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.7.132:35861/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785632009, "uuid": "93c2bdfa-8e0c-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.110.199:49551/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785632126, "uuid": "d9c38a0e-8e0c-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.12.49:44802/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785632180, "uuid": "f967b64d-8e0c-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.73.15:58994/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785633141, "uuid": "36be4406-8e0f-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.29.24:45144/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785633317, "uuid": "9f300eb4-8e0f-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_a88c88317d5c7d6a.exe", "Tag": [ { "name": "9d2ca3", "colour": "#472c25", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RemoteX", "colour": "#6d8996", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785633367, "uuid": "bd10a7c9-8e0f-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.209.245:59335/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785633730, "uuid": "95cb4813-8e10-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.110.199:49551/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785634573, "uuid": "8bd1b63b-8e12-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.213.177.184:53333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785634628, "uuid": "ace56e8f-8e12-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.225.129:33500/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785635243, "uuid": "1b32e248-8e14-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.237.255:58146/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785635364, "uuid": "637bcfe2-8e14-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.78.68.30:39646/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785635527, "uuid": "c4788253-8e14-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.209.245:59335/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785635528, "uuid": "c4ffe580-8e14-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.86.1:54531/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785636067, "uuid": "0681f78d-8e16-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.155.97:56411/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785636272, "uuid": "80894acd-8e16-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.96.161:49821/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785636383, "uuid": "c3289549-8e16-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.193.122.247:53791/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785636623, "uuid": "51dd69c3-8e17-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.232.119:39840/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785636807, "uuid": "bf7fd0a9-8e17-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.78.68.30:39646/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785636864, "uuid": "e153d0fc-8e17-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.237.255:58146/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785637285, "uuid": "dc83d4ff-8e18-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.93.53:38169/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785637336, "uuid": "facc0851-8e18-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.208.89:42375/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785637567, "uuid": "84d5a4a4-8e19-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.155.97:56411/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785638124, "uuid": "d0cf0802-8e1a-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.193.122.247:53791/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785638432, "uuid": "883b91fb-8e1b-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.144.14/pancake/bin.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785639942, "uuid": "0c643caa-8e1f-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.175.33:53260/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785639981, "uuid": "236ce4bf-8e1f-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.158.139:32770/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785640103, "uuid": "6c730265-8e1f-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.32.218:39852/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785641062, "uuid": "a789b96d-8e21-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.32.18:55398/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785641601, "uuid": "e94e2aad-8e22-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.32.218:39852/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785642639, "uuid": "53cd94a5-8e25-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.251.225.244:45459/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785642736, "uuid": "8db8ba6c-8e25-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.244.221:52345/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785643026, "uuid": "3a2db89e-8e26-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.226.183:56588/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785643159, "uuid": "89d7182c-8e26-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.234.93:51900/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785643706, "uuid": "cf8b78d0-8e27-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.252.68:59050/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785643757, "uuid": "edda6072-8e27-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.252.68:59050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785643939, "uuid": "5ac4647c-8e28-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.134.245.200:59429/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785644241, "uuid": "0e873c29-8e29-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.235.137.220:33995/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785644425, "uuid": "7c7a2a4e-8e29-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.181.224:49612/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785644956, "uuid": "b8a3a71d-8e2a-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.99.167.16:49416/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785645189, "uuid": "43d7e9d0-8e2b-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://wantsellonline.com/1.exe", "Tag": [ { "name": "197b1ec4b9644da7b43669fd4f0ed73f", "colour": "#290156", "exportable": true, "hide_tag": false }, { "name": "AnimateClipper", "colour": "#63d9dc", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785645565, "uuid": "23dd8b34-8e2c-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.235.72:50700/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785645920, "uuid": "f73531c9-8e2c-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.235.137.220:33995/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785645920, "uuid": "f76e4934-8e2c-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.167.68.202:32839/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785646267, "uuid": "c62570aa-8e2d-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.81.148:42355/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785646267, "uuid": "c6713065-8e2d-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.182.162:47272/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785646279, "uuid": "cd8d66cb-8e2d-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.37.129:55685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785646640, "uuid": "a4628cb1-8e2e-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.99.167.16:49416/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785647527, "uuid": "b4f5be09-8e30-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.154.116:43301/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785647718, "uuid": "26d99791-8e31-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.243.200:54340/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785647784, "uuid": "4e8569bb-8e31-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.252.175.109/bin.armv7l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785648020, "uuid": "db49f69f-8e31-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.64.97:38285/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785648210, "uuid": "4c47fbde-8e32-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.149.204.12:34799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785649215, "uuid": "a32af7b5-8e34-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.134.187:36959/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785649468, "uuid": "39e2c01f-8e35-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.243.200:54340/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785649642, "uuid": "a1e7c340-8e35-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.149.204.12:34799/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785649877, "uuid": "2de8efd5-8e36-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.23.162:60929/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785649879, "uuid": "2f5e3978-8e36-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.104.0:56112/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785650108, "uuid": "b7947f7e-8e36-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.180.80:46856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785650723, "uuid": "262d4863-8e38-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.86.172:57830/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785651450, "uuid": "d74e65d9-8e39-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.180.80:46856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785652768, "uuid": "e8d2163f-8e3c-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.11.19:34692/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653227, "uuid": "fabed586-8e3d-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.20.196:43640/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653228, "uuid": "fb76e9f0-8e3d-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.249.199.3:54200/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653321, "uuid": "32efcad4-8e3e-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.248.213:50161/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653584, "uuid": "cf9ec2f5-8e3e-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.42:2345/bot.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653584, "uuid": "cfa4b265-8e3e-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_4ee2cb2e27bf5cf6.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653584, "uuid": "cfa4b6db-8e3e-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_4cb61535391ee2ca.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653584, "uuid": "cfab2c30-8e3e-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_a180d7b365a22950.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653585, "uuid": "cfe6e3e4-8e3e-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_58065cc2507519e8.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653585, "uuid": "cfee0693-8e3e-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.42:2345/bot.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653585, "uuid": "cffe3360-8e3e-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_f8b3df0bb4538dce.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653594, "uuid": "d537b215-8e3e-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.25.217.70/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653599, "uuid": "d87462a7-8e3e-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.196.97.80:6677/femboy.sh", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653645, "uuid": "f3ffbcd0-8e3e-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_60d2bd674d037b28.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653645, "uuid": "f402603e-8e3e-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_383a5ee68e302d41.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785653667, "uuid": "0134526e-8e3f-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.58.195:45339/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785654205, "uuid": "4195c718-8e40-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_a0497afdd457f5f8.exe", "Tag": [ { "name": "54e64e", "colour": "#eb829a", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785654500, "uuid": "f1b45fb9-8e40-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.36.63:54993/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785655168, "uuid": "7f656129-8e42-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.248.213:50161/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785655628, "uuid": "917e80bc-8e43-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.150.63:52973/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785656186, "uuid": "de790423-8e44-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.67.69:60846/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785656499, "uuid": "991bf78c-8e45-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.67.69:60846/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785657185, "uuid": "31f52382-8e47-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_27c28b4831967d60.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785657192, "uuid": "35d0c4fd-8e47-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://svo-poiskrat.vercel.app/?download=1", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785657508, "uuid": "f22df0ff-8e47-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.226.183:56588/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785659129, "uuid": "b85d7f40-8e4b-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.1.230:53774/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785659611, "uuid": "d7f49952-8e4c-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.179.246:55917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785659766, "uuid": "342675a5-8e4d-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.121.110.105/dmZ8", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785659766, "uuid": "34267664-8e4d-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.121.110.105/ChQ", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785659766, "uuid": "34302cbf-8e4d-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.121.110.105/rEo", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785659766, "uuid": "34322bfa-8e4d-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.121.110.105/3HY", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785659766, "uuid": "34354bcf-8e4d-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.121.110.105/m96", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785659766, "uuid": "345270f7-8e4d-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.121.110.105/uzJ", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785659766, "uuid": "345d1f76-8e4d-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.121.110.105/hjAW", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785659766, "uuid": "3462f0b4-8e4d-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.121.110.105/828Z", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785659766, "uuid": "3463d1ea-8e4d-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.121.110.105/4Ao", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785659766, "uuid": "34681f9d-8e4d-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.121.110.105/Nkg", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785659768, "uuid": "35896c8e-8e4d-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.0:53103/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785660626, "uuid": "34d37a28-8e4f-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.1.230:53774/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785660627, "uuid": "3533f0b4-8e4f-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.214.61:46712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785660736, "uuid": "7699fb7a-8e4f-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.216.47:49264/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785661326, "uuid": "d629ba45-8e50-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.197.119:56036/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785661396, "uuid": "ffc6ed8c-8e50-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.179.246:55917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785661579, "uuid": "6ca6c2d2-8e51-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.86.1:54531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785662119, "uuid": "ae856cad-8e52-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.216.47:49264/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785662227, "uuid": "eee29cee-8e52-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.123.169:49876/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785662353, "uuid": "39f778e1-8e53-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.214.61:46712/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785662767, "uuid": "30aebe56-8e54-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.121.110.105/DQ0", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785662767, "uuid": "30aed636-8e54-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.121.110.105/EyMl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785662767, "uuid": "30b7542a-8e54-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.121.110.105/TCIi", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785662826, "uuid": "54491e75-8e54-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.121.110.105/mYH", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785662826, "uuid": "5451602a-8e54-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.121.110.105/9YZ5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785662827, "uuid": "54cdb27a-8e54-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.127.131:36544/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785662847, "uuid": "6063b466-8e54-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.81.241:59045/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785663142, "uuid": "108b7f89-8e55-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.86.97:35671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785663560, "uuid": "099a3abf-8e56-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.209.153/00101010101001/morte.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785663667, "uuid": "4997524a-8e56-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_03d11bb69b329ea4.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785663983, "uuid": "059ab92c-8e57-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.47.41:51317/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664162, "uuid": "70bd85b0-8e57-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.208.179.252:36276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664326, "uuid": "d23e7d06-8e57-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.81.241:59045/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664459, "uuid": "21771106-8e58-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.86.97:35671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664574, "uuid": "65e2db3a-8e58-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.193.56:48546/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664874, "uuid": "18bf5dc8-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.182.162:47272/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664874, "uuid": "190c04fc-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.194.144:38902/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664875, "uuid": "192d6d9a-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.185:38635/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664875, "uuid": "19640f68-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.242.122:46355/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664875, "uuid": "1964e919-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.62.210:39631/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664875, "uuid": "19659a60-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.161.57:35892/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664875, "uuid": "1967492b-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.61.151.115:37817/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664875, "uuid": "1967d949-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.58.67:41241/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664875, "uuid": "19680e11-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.227.50:38677/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664875, "uuid": "196aa496-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.177.157:60692/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664875, "uuid": "196c9059-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.96.38:58776/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664875, "uuid": "196e2c85-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.123.169:49876/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664875, "uuid": "1979a303-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.213.64:35134/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664875, "uuid": "197cf281-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.56.21.66:51722/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664875, "uuid": "1980594b-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.252.199.194:50709/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664875, "uuid": "1984c603-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.146.185.245:51581/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664875, "uuid": "19867b6e-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.77.102:52782/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664875, "uuid": "198a1840-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.37.212.172:59859/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664875, "uuid": "198c4736-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.227.109.194:34120/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664875, "uuid": "198f9972-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.84.212:38334/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664875, "uuid": "199733fb-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.227.173.42:38998/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664875, "uuid": "19a447c6-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.77.116:43247/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664875, "uuid": "19a70095-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.73.5:36083/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664875, "uuid": "19a98652-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.33.170:47375/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664876, "uuid": "19bba3a2-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.210.107:35406/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664876, "uuid": "19c8b546-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.180.122.72:50413/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664876, "uuid": "19ed5447-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.92.31:46181/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664876, "uuid": "19f4e0e9-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.84.130:40337/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664876, "uuid": "19f8d5a3-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.33.170:47375/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664876, "uuid": "19fd07ce-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.218.253:33305/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664876, "uuid": "19feffc0-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.76.51:35349/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664876, "uuid": "1a0893b5-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.18.154:33850/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664876, "uuid": "1a145b4f-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.148.132:57357/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664877, "uuid": "1a693b35-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.252.140.42:58896/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664881, "uuid": "1d3464ff-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.246.106:49196/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664881, "uuid": "1d3467fd-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.227.173.42:38998/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664881, "uuid": "1d3ad336-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.251.230:33039/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664881, "uuid": "1d3d37c6-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.245.110:42749/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664883, "uuid": "1deb3bf0-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.50.210:56408/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664883, "uuid": "1df6648d-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.225.129:33500/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664883, "uuid": "1df7ac27-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.150.110:54758/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664883, "uuid": "1dff99ed-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.168.178:43874/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664883, "uuid": "1e22d76a-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.84.33:39446/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664883, "uuid": "1e3a0eb0-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.118.212:36060/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664883, "uuid": "1e3a0f3e-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.190.46:50223/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664883, "uuid": "1e3a12c5-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.118.212:36060/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664883, "uuid": "1e3ce026-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.163.107.242:39612/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664883, "uuid": "1e55bcda-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.76.51:35349/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664883, "uuid": "1e623b25-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.11.225:52662/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664883, "uuid": "1e62b721-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.134.146:44202/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664884, "uuid": "1e823850-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.227.109.194:34120/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664884, "uuid": "1e8326f9-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.54.205:43906/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664884, "uuid": "1e992386-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.94.58.116:51014/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664884, "uuid": "1e9c6ae4-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.151.106:50232/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664884, "uuid": "1ea81d6e-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.142.224:35093/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664884, "uuid": "1eaf8504-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.41.102.232:34462/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664884, "uuid": "1ed487f0-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.170.213:35008/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664884, "uuid": "1ed8d05b-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.221.188:51537/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664884, "uuid": "1ed8ed3e-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.59.129:36915/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664884, "uuid": "1ed8fb20-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.215.140:39105/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664884, "uuid": "1edf38bb-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.20.149:56933/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664884, "uuid": "1edfc142-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.192.121:54508/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664884, "uuid": "1ee00bf6-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.221.188:51537/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664884, "uuid": "1ef9ac75-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.108.88:43076/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664884, "uuid": "1f0eb96e-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.176:37259/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664885, "uuid": "1f6ab3f4-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.170.249:54324/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664889, "uuid": "21d157ac-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.192.121:54508/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664890, "uuid": "2280ab5c-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.222.115:49881/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664891, "uuid": "22b464f0-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.117.230:60436/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664891, "uuid": "22e00229-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.227.219:37896/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664891, "uuid": "230fd064-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.2.242:60905/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664891, "uuid": "2311e45a-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.194.144:38902/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664891, "uuid": "232f5c5b-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.82.112:48678/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "234ed72b-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.30.44:55649/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "2357002f-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.49.184:52595/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "235b3efd-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.205.189:37183/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "235ef6b2-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.155.68:59329/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "235f03ef-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.151.106:50232/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "2361e9de-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.84.130:40337/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "236a2d23-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.233.151.133:41093/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "236a3bd8-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.197.69:55334/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "237ad841-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.2.242:60905/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "239074b3-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.102.20:56125/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "239ed81e-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.73.5:36083/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "23a06258-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.181.224:49612/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "23a1ae25-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.222.115:49881/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "23a3ad4c-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.227.50:38677/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "23a46d3f-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.116.34.34:48875/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "23a59f6d-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.246.180:60663/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "23a79190-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.154.214:32825/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "23ac386a-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.170.213:35008/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "23bf471d-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.185:38635/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "23cba759-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.197.69:55334/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "23cd96e4-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.220.96:42069/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "23d95889-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.151.237:35975/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664892, "uuid": "23d96d48-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.176:37259/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664893, "uuid": "23f05a4d-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.71.40:52557/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664893, "uuid": "23f0cc74-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.233.151.133:41093/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664893, "uuid": "23f79e35-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.110.234:45926/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664893, "uuid": "240703df-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.157.169.5:34135/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664893, "uuid": "240cc9ba-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.181.102:41996/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664893, "uuid": "24143392-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.100.32.52:39326/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664893, "uuid": "2421c4e6-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.195.28.22:33145/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664893, "uuid": "24251886-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.202.181:35968/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664896, "uuid": "25d7b0ba-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.134.146:44202/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664900, "uuid": "2818fc5c-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.52.62:52175/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664900, "uuid": "28414bb4-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.101.181:47425/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664900, "uuid": "287acd6b-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.170.249:54324/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664900, "uuid": "2892c1e8-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.32:35459/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664900, "uuid": "28940b04-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.245.110:42749/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664901, "uuid": "28aa9ec5-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.236.44.113:44431/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664901, "uuid": "28cdfcaf-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.58.67:41241/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664901, "uuid": "28d2951a-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.93.182:60247/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664901, "uuid": "28d29cd2-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.80.129:35082/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664901, "uuid": "28d2cab2-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.48.123.149:56728/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664901, "uuid": "28d7899c-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.248.179:44390/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664901, "uuid": "28df0f4f-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.48.123.149:56728/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664901, "uuid": "28eb70e7-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.112.129:42972/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664901, "uuid": "28eb852e-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.215.140:39105/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664901, "uuid": "28eb8651-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.76.64:55002/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664901, "uuid": "28ebce95-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.235.243:46833/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664901, "uuid": "28ed984e-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.205.153:48601/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664901, "uuid": "28eda133-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.161.116.2:42745/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664901, "uuid": "28edbb33-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.181.102:41996/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664901, "uuid": "28edca71-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.59.129:36915/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664901, "uuid": "28edec45-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.195.28.22:33145/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664901, "uuid": "28ef851f-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.25.217.70/payloads.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664901, "uuid": "28f29d95-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.225.195.11:51939/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664901, "uuid": "28f2de67-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.11.225:52662/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664901, "uuid": "28f4c7e0-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.213.195:39888/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664901, "uuid": "291eabee-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.201.115:57813/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664901, "uuid": "291f61c9-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.25.71:58345/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664902, "uuid": "295727f5-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.199.254.5:36155/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664902, "uuid": "2957c11e-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.83.141:42413/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664902, "uuid": "2959c267-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.112.232:51975/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664902, "uuid": "295ce664-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.232.123:58614/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664902, "uuid": "295cea69-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.175.111:33777/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664902, "uuid": "29b26dec-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.249.199.3:54200/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664902, "uuid": "29cc33e3-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://8.134.218.77:9875/linux", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664904, "uuid": "2ab61d73-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.199.254.5:36155/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664907, "uuid": "2c48d61b-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.200.35:52516/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785664917, "uuid": "324b9193-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.53.120.28:6923/linux", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785665538, "uuid": "a4c04bbf-8e5a-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.21.119:38381/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785666067, "uuid": "dfbe0764-8e5b-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.127.131:36544/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785666081, "uuid": "e84215bf-8e5b-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.82.26:56083/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785666126, "uuid": "0309b4ba-8e5c-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.82.26:56083/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785667746, "uuid": "c8ee891f-8e5f-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://166.88.134.62/0x/cls", "Tag": [ { "name": "DPRK", "colour": "#43d2dc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785667746, "uuid": "c8ef6469-8e5f-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://166.88.134.62/0x/js", "Tag": [ { "name": "DPRK", "colour": "#43d2dc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785667746, "uuid": "c8f3644f-8e5f-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://166.88.134.62/0x/ls", "Tag": [ { "name": "DPRK", "colour": "#43d2dc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785668004, "uuid": "62318cec-8e60-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.209.142:59324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785668828, "uuid": "4d7f119e-8e62-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.76.135:58019/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785669128, "uuid": "006e09e3-8e63-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.198.224:45753/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785669506, "uuid": "e1cf7383-8e63-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.209.142:59324/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785669623, "uuid": "27a88dfa-8e64-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.195.250:39192/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785669727, "uuid": "6564ca6c-8e64-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.210.107:35406/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785670342, "uuid": "d42b4ea2-8e65-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.195.250:39192/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785671120, "uuid": "a3d08426-8e67-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.36.63:54993/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785671323, "uuid": "1cbec1f9-8e68-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.143.58:38518/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785671485, "uuid": "7d563498-8e68-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.56.204.114:55973/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785672256, "uuid": "491f91db-8e6a-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.246.107:35366/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785672979, "uuid": "f7c00adb-8e6b-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.66.100:56668/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785673027, "uuid": "144b4e15-8e6c-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.59.212:37318/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785673101, "uuid": "40621a21-8e6c-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.56.204.114:55973/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785673168, "uuid": "685c7989-8e6c-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.227.184.200:56303/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785673389, "uuid": "ec3fc684-8e6c-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://cim-kolea.com/3.exe", "Tag": [ { "name": "AnimateClipper", "colour": "#63d9dc", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false }, { "name": "e3aaa940c8c30f0571cc42a6e9260f60", "colour": "#195fdb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785673462, "uuid": "17b1decc-8e6d-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.66.100:56668/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785673880, "uuid": "10aaa9c8-8e6e-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.246.107:35366/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785674906, "uuid": "74528929-8e70-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.227.184.200:56303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785674906, "uuid": "74a9a778-8e70-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.6.192:60060/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785674960, "uuid": "944c99e2-8e70-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.6.192:60060/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676166, "uuid": "6339659e-8e73-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.35.172:41985/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676327, "uuid": "c322e946-8e73-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.59.212:37318/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676343, "uuid": "cd22a4bf-8e73-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.229.154:35785/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676703, "uuid": "a34b2582-8e74-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.165.9.140:59419/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676866, "uuid": "04da32e3-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.104.0:56112/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676925, "uuid": "27f4f7bd-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_2eb5775665263b24.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676925, "uuid": "27fec093-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_218826de3f5a5bb4.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676925, "uuid": "280a497c-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_0a5c6aecd2079cf9.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676925, "uuid": "280a6010-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_8911b671beb49a6a.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676925, "uuid": "280a6396-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_b725112f82065785.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676927, "uuid": "29154a16-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.240.17/Bin/ScreenConnect.WindowsBackstageShell.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676927, "uuid": "2930ad83-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.240.17/Bin/ScreenConnect.WindowsFileManager.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676927, "uuid": "2933e5d6-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.240.17/Bin/ScreenConnect.ClientService.dll", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676927, "uuid": "293b48a7-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.240.17/Bin/ScreenConnect.ClientService.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676928, "uuid": "297d1e38-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.240.17/Bin/ScreenConnect.WindowsClient.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676928, "uuid": "297ece43-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.240.17/Bin/ScreenConnect.Client.dll", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676928, "uuid": "29aa03ce-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.240.17/Bin/ScreenConnect.Core.dll", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676929, "uuid": "2a140ad6-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.240.17/Bin/ScreenConnect.Windows.dll", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676929, "uuid": "2a2edd40-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://directdownloadl.ink/f/a7118141be1f.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676931, "uuid": "2ba7dc1a-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://letsgobok.com/Tejkpnj.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676932, "uuid": "2c408997-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.109/xmrig.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676940, "uuid": "30cf7d58-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.55.95/bin/support.client.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676940, "uuid": "30d33e4d-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.209.17/lc/2.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676940, "uuid": "30d935fb-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.209.17/lc/3.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676940, "uuid": "30fbff34-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://thenewcoffeshop.com/Bin/ScreenConnect.ClientService.dll", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676941, "uuid": "3110f6b0-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://thenewcoffeshop.com/Bin/ScreenConnect.ClientService.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676941, "uuid": "3110fe7c-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://thenewcoffeshop.com/Bin/ScreenConnect.WindowsFileManager.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676941, "uuid": "3112130d-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.55.95/bin/screenconnect.clientsetup.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676941, "uuid": "31121f1b-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.209.17/lc/1.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676941, "uuid": "3117d0ee-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://thenewcoffeshop.com/Bin/ScreenConnect.Client.dll", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676942, "uuid": "319f3118-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://file.tugou.com.co/files/Adobe%20Acrobat%20Reader.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676942, "uuid": "31facff8-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://thenewcoffeshop.com/Bin/ScreenConnect.WindowsBackstageShell.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676942, "uuid": "32261f02-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://thenewcoffeshop.com/Bin/ScreenConnect.WindowsClient.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676943, "uuid": "329ae08f-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://file.tugou.com.co/files/route.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676944, "uuid": "32d0ae4c-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://file.tugou.com.co/files/powershell.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676944, "uuid": "334fc868-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://thenewcoffeshop.com/Bin/ScreenConnect.Core.dll", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676945, "uuid": "33741597-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://thenewcoffeshop.com/Bin/ScreenConnect.Windows.dll", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785676947, "uuid": "34b6b184-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://file.tugou.com.co/files/msdt.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785677170, "uuid": "b9f4064a-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://safeuploadz.com/uploads/6a4b9d67c109e.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785677225, "uuid": "dab5b967-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://directdownloadl.ink/f/452f5657e973.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785677227, "uuid": "dba0d17e-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://directdownloadl.ink/f/0713a6e9e059.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785677229, "uuid": "dcf95342-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://directdownloadl.ink/f/aca7ebab32cd.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785677232, "uuid": "dec7b120-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://directdownloadl.ink/f/5239f7a9c7ae.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785679569, "uuid": "4f763541-8e7b-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.32.154:45035/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785681025, "uuid": "b3bc7a47-8e7e-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.243.251.152:40774/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785681245, "uuid": "36c7dfcf-8e7f-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_2406cf76a7ca34ca.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785681245, "uuid": "36ccadf3-8e7f-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_bbcbeb2966f48fd6.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785681262, "uuid": "40a260ec-8e7f-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.77.227.111/hiddenbin/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785681268, "uuid": "44430ae0-8e7f-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.77.227.111/hiddenbin/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785681429, "uuid": "a4280e09-8e7f-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.112.232:51975/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785682938, "uuid": "27ac1278-8e83-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.1.200:60235/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785684326, "uuid": "62dcd80e-8e86-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.31.184.132:51169/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785684745, "uuid": "5ce80d93-8e87-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.244.68.248:38340/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785685644, "uuid": "74d7d6f2-8e89-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.244.68.248:38340/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785686445, "uuid": "52579f8d-8e8b-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.dropbox.com/scl/fi/fl9uweistzcccua040lmj/Hinge.exe?rlkey=60h76wonw3lfo89vu7epcmgwr&st=9o0gib4o&dl=1", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785687497, "uuid": "c52f5f0b-8e8d-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.46.135:41660/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785687562, "uuid": "ebb957de-8e8d-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.31.184.132:51169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785688568, "uuid": "4354ee0c-8e90-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.107.9:40839/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785688568, "uuid": "435e5bd4-8e90-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.208.110.51:56963/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785688581, "uuid": "4b258182-8e90-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.20.175:60685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785688942, "uuid": "22c4008a-8e91-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.20.175:60685/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785689004, "uuid": "4768f140-8e91-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.46.135:41660/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785689783, "uuid": "17d27d6c-8e93-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.116.109:54507/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785690366, "uuid": "736aa85b-8e94-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.107.9:40839/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785690367, "uuid": "739082f4-8e94-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.230.160.24:44749/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785690981, "uuid": "e1c6a07e-8e95-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.133.191:36999/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785692308, "uuid": "f8b6bd62-8e98-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.151.204.81:33053/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785692729, "uuid": "f372c2d4-8e99-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.133.191:36999/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785692895, "uuid": "56e432f9-8e9a-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.64.25:50956/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785693921, "uuid": "ba0d953e-8e9c-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.151.204.81:33053/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785694761, "uuid": "aea9a5e2-8e9e-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://eclipsebible.com/loader.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785694762, "uuid": "af2e48e0-8e9e-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://eclipsebible.com/eclipse.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785694762, "uuid": "af693f2a-8e9e-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.48.37/eclipse.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785695119, "uuid": "840b5636-8e9f-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.248.15.35:50460/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785695425, "uuid": "3aa174c0-8ea0-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.32.18:55398/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785696500, "uuid": "bb477cac-8ea2-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.83.182:58056/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785696799, "uuid": "6dd217ac-8ea3-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.248.15.35:50460/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785696931, "uuid": "bc488bf3-8ea3-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.83.182:58056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785698357, "uuid": "0e2403f0-8ea7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.253.8.96:35401/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785698728, "uuid": "eb91d251-8ea7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.205.22:58207/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785699687, "uuid": "271b9601-8eaa-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.34.56.255:59959/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785699727, "uuid": "3ea9246e-8eaa-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.25.33:47305/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785700098, "uuid": "1c322634-8eab-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.137.245.219/systemd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785700230, "uuid": "6aeffac0-8eab-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.205.22:58207/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785700832, "uuid": "d152368e-8eac-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.208.110.21:57805/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785701238, "uuid": "c3a1e3f4-8ead-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.114.151:59466/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785701848, "uuid": "2f1d73c8-8eaf-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.247.7:47567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785702140, "uuid": "dcfc777c-8eaf-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.202.187:56132/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785703102, "uuid": "1a6446ae-8eb2-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.77.227.105/bins/cekizsafu", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785703521, "uuid": "1441a4f1-8eb3-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.247.7:47567/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785703705, "uuid": "820494ee-8eb3-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.202.187:56132/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785704063, "uuid": "5786461b-8eb4-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.60.21:57996/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785704066, "uuid": "58da30f7-8eb4-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.233.97.217:35897/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785704479, "uuid": "4f4d7fa3-8eb5-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.199.134:45304/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785705559, "uuid": "d2cf71ae-8eb7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.246.83:60674/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785706398, "uuid": "c6d8827d-8eb9-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.4.67.131:34072/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785706644, "uuid": "59f73a51-8eba-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.213.42:42072/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785707002, "uuid": "2ef1638b-8ebb-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.148.103.41:33345/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785707069, "uuid": "56dcc479-8ebb-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.246.83:60674/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785707723, "uuid": "dc9eccf5-8ebc-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.200.35:52516/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785707774, "uuid": "fafe79a1-8ebc-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.148.103.41:33345/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785707965, "uuid": "6ce3d5fc-8ebd-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.31.228.75:33788/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785708084, "uuid": "b3fc2d94-8ebd-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.16.112:56230/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785708141, "uuid": "d5f1d255-8ebd-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.16.112:56230/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785708323, "uuid": "4284e83d-8ebe-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.213.42:42072/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785708557, "uuid": "ce26c529-8ebe-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.39.10:37216/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785709348, "uuid": "a5a03e2c-8ec0-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.159.222:38771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785710062, "uuid": "4ed8256f-8ec2-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.39.10:37216/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785711035, "uuid": "9303c8f2-8ec4-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.146.25:47833/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785711326, "uuid": "407dba81-8ec5-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.191.32.197:54010/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785711561, "uuid": "cc612636-8ec5-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.112.33.200:46152/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712225, "uuid": "58317650-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.137.177:43274/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712279, "uuid": "78246c9e-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.armv4l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712279, "uuid": "782ecc26-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.armv5l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712279, "uuid": "782eef1e-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.armv7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712279, "uuid": "7861ab66-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712279, "uuid": "7874c8b1-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/huawei", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712279, "uuid": "78786a3c-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/realtek", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712280, "uuid": "78fba37a-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/gpon", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712280, "uuid": "792b91a1-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.ppc440fp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712280, "uuid": "793333dc-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.superh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712280, "uuid": "7946f069-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712281, "uuid": "796b954c-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.armv7l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712281, "uuid": "79a6f43c-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712281, "uuid": "79a76afc-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.i386", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712281, "uuid": "79aafcd9-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.arm6n", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712281, "uuid": "79c0d652-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712281, "uuid": "79c2841f-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712281, "uuid": "79cd26b3-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.armv6l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712282, "uuid": "79faaceb-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/g.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712282, "uuid": "79fac481-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/g.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712282, "uuid": "79fdca77-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712285, "uuid": "7bf0583a-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.arm5n", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712285, "uuid": "7c025dcc-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712285, "uuid": "7c0503ba-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712285, "uuid": "7c13c44c-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.arm4n", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712285, "uuid": "7c17d4e3-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712285, "uuid": "7c2ef043-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/hnap", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712287, "uuid": "7d2f4693-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.arm4", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712287, "uuid": "7d303fef-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.x64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712287, "uuid": "7d315cda-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.arm7n", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712287, "uuid": "7d324cab-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.151.113/d/xd.x86-64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712642, "uuid": "50985481-8ec8-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.159.222:38771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785712940, "uuid": "025ee945-8ec9-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.112.33.200:46152/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785714021, "uuid": "86fd53f8-8ecb-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.137.177:43274/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785714561, "uuid": "c8c2cf4f-8ecc-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.63.160:43675/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1785714613, "uuid": "e78aa9b3-8ecc-11f1-8d7b-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.191.32.197:54010/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664865, "uuid": "13a4e80a-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.58.67", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785636064, "uuid": "04fa3ccf-8e16-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.155.97", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785653285, "uuid": "1d1c6db8-8e3e-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.248.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785688565, "uuid": "41a9e037-8e90-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.225.107.9", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676685, "uuid": "98a6fe8d-8e74-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.165.9.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785645906, "uuid": "eef7d294-8e2c-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.167.68.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785648006, "uuid": "d2762e2a-8e31-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.64.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785671284, "uuid": "05a2160b-8e68-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.143.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785662825, "uuid": "5368039b-8e54-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.81.241", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785642606, "uuid": "403f3c5c-8e25-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.251.225.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785653645, "uuid": "f3d17388-8e3e-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.58.195", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785636244, "uuid": "6fe52181-8e16-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.96.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785639963, "uuid": "18b73caa-8e1f-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.158.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664875, "uuid": "19b6eb2f-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.94.58.116", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664892, "uuid": "23872bc4-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.199.254.5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664875, "uuid": "19a97e20-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.151.106", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785688565, "uuid": "41a9bd1e-8e90-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.20.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664893, "uuid": "2438dd0a-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.200.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785672964, "uuid": "eed5f5af-8e6b-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.66.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785649865, "uuid": "269db5ce-8e36-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.23.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785647706, "uuid": "201824c3-8e31-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.243.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785704464, "uuid": "464b4222-8eb5-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.199.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785631744, "uuid": "f61379ff-8e0b-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.12.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785646265, "uuid": "c4fcf323-8e2d-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.182.162", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664564, "uuid": "602c108e-8e58-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.193.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785702124, "uuid": "d397812a-8eaf-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.202.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664865, "uuid": "139cf475-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.245.110", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785701825, "uuid": "213bad94-8eaf-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.247.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785706985, "uuid": "24ec9ff8-8ebb-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.148.103.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785630606, "uuid": "4f99b605-8e09-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.187.224.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785644944, "uuid": "b16ad18d-8e2a-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.99.167.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664865, "uuid": "13af566e-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.28.197.69", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664865, "uuid": "139dd677-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.53.120.28", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785706624, "uuid": "4deb85a5-8eba-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.84.213.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785660605, "uuid": "289564ed-8e4f-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.84.214.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664884, "uuid": "1ebe4ea7-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.195.28.22", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664875, "uuid": "1988994b-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.233.151.133", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785704044, "uuid": "4c13555d-8eb4-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.233.97.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664866, "uuid": "13da2c1f-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.73.5", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785669124, "uuid": "fe47e4d7-8e62-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.198.224", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785666065, "uuid": "de892d17-8e5b-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.82.26", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785631984, "uuid": "84fb2380-8e0c-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.110.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785708064, "uuid": "a854a7bb-8ebd-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.16.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664884, "uuid": "1eb1215f-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.157.169.5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785635224, "uuid": "104c8ae6-8e14-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.237.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785659585, "uuid": "c844ce38-8e4c-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.179.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785669606, "uuid": "1d97104c-8e64-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.195.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664865, "uuid": "13aa6975-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.76.51", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785643925, "uuid": "521195bd-8e28-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.134.245.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785690364, "uuid": "723190d5-8e94-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.230.160.24", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664883, "uuid": "1e0b1ca2-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.222.115", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664865, "uuid": "13a4de28-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.92.31", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676325, "uuid": "c1f23b25-8e73-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.229.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785689763, "uuid": "0bd407fa-8e93-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.116.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785662825, "uuid": "53682072-8e54-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.127.131", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664865, "uuid": "13b2bcb3-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.18.154", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664875, "uuid": "199566bb-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.192.121", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664865, "uuid": "13a88b60-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.33.170", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785714544, "uuid": "be80dc51-8ecc-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.63.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785690965, "uuid": "d8407c5a-8e95-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.46.133.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664876, "uuid": "1a1a3857-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.59.129", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785663125, "uuid": "0617fc25-8e55-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.86.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785667745, "uuid": "c80d1b4d-8e5f-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "166.88.134.62", "Tag": [ { "name": "DPRK", "colour": "#43d2dc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785634565, "uuid": "8774bac8-8e12-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.213.177.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785684306, "uuid": "5745680c-8e86-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.31.184.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664865, "uuid": "13b50b93-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.180.122.72", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785681007, "uuid": "a8e93e91-8e7e-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.243.251.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785684724, "uuid": "508e5881-8e87-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.244.68.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664866, "uuid": "13d990ee-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.252.140.42", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785698344, "uuid": "06a7889f-8ea7-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.253.8.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664884, "uuid": "1ed85f48-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.202.181", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785641044, "uuid": "9cdab0f5-8e21-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.32.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785643684, "uuid": "c27d6abb-8e27-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.252.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785653224, "uuid": "f90a101e-8e3d-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.20.196", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785640084, "uuid": "60a97d53-8e1f-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.32.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785674884, "uuid": "6774b217-8e70-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.6.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785668825, "uuid": "4beec911-8e62-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.76.135", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664892, "uuid": "23ccdfb3-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.232.123", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664875, "uuid": "199730fe-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.215.140", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785705544, "uuid": "ca50d3ea-8eb7-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.246.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785633364, "uuid": "bb7830aa-8e0f-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.209.245", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785692884, "uuid": "4ff1e3b6-8e9a-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.64.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785692284, "uuid": "ea857886-8e98-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.151.204.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785695105, "uuid": "7bea1fd7-8e9f-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.248.15.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785648188, "uuid": "3f241443-8e32-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "186.149.204.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785700084, "uuid": "13add06e-8eab-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.137.245.219", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785694744, "uuid": "a4e11ba4-8e9e-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.26.48.37", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785700805, "uuid": "c1a37c08-8eac-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "210.208.110.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785688565, "uuid": "41a9dd63-8e90-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "210.208.110.51", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785671466, "uuid": "71df95c2-8e68-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.56.204.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664865, "uuid": "13a7abc1-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.202.77.102", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785635525, "uuid": "c32eeac9-8e14-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.86.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664875, "uuid": "19a46e3b-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.20.149", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785644225, "uuid": "0515820b-8e29-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.235.137.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785639906, "uuid": "f6c0b2a8-8e1e-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.134.175.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664893, "uuid": "23fbba06-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.175.111", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664866, "uuid": "13da244d-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.148.132", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664893, "uuid": "23fafd11-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.83.141", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664892, "uuid": "23ce1f08-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.112.232", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785687484, "uuid": "bd52020b-8e8d-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.46.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785636363, "uuid": "b6f41820-8e16-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.193.122.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785667984, "uuid": "56cbf478-8e60-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.209.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664885, "uuid": "1f52ca08-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.181.102", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664865, "uuid": "13afe23f-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.210.107", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664884, "uuid": "1e9d7f0e-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.82.112", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785638407, "uuid": "78fa2962-8e1b-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.56.144.14", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785703085, "uuid": "103beb8d-8eb2-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.77.227.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785681245, "uuid": "36993209-8e7f-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.77.227.111", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664885, "uuid": "1f27f595-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.100.32.52", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785635344, "uuid": "5776795a-8e14-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.78.68.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785712205, "uuid": "4c8552f0-8ec7-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.137.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664885, "uuid": "1f282383-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.81.110.234", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664892, "uuid": "23891a21-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.88.248.179", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785665525, "uuid": "9cb5fe3d-8e5a-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.21.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785698707, "uuid": "dea8f613-8ea7-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.205.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785642724, "uuid": "869dc155-8e25-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.244.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785679566, "uuid": "4dd1ff7c-8e7b-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.32.154", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785660725, "uuid": "6f8f3d6c-8e4f-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.216.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785644405, "uuid": "70942f2b-8e29-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.181.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785656166, "uuid": "d2751f95-8e44-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.67.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664865, "uuid": "13ab94c4-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.218.253", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785708544, "uuid": "c60a5a74-8ebe-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.39.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664893, "uuid": "2424553d-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.25.71", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676145, "uuid": "56f2c95c-8e73-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.35.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785673025, "uuid": "12e9cfe8-8e6c-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.59.212", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664876, "uuid": "1a0f32b4-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.170.213", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664877, "uuid": "1aca439c-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.170.249", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785672245, "uuid": "42667d07-8e6a-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.246.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664865, "uuid": "13a849cc-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.52.227.50", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664865, "uuid": "13ab4405-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.77.116", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664865, "uuid": "13b5faa6-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.54.177.157", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664865, "uuid": "139ec247-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.213.64", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664875, "uuid": "19a5b2d3-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.142.224", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664865, "uuid": "139d9079-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.87.161.57", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785673144, "uuid": "5a4cb8e4-8e6c-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.227.184.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664875, "uuid": "19a7b221-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.41.102.232", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785711006, "uuid": "815cd8f6-8ec4-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.146.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785631744, "uuid": "f6134de8-8e0b-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.155.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785709324, "uuid": "96edd83f-8ec0-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.159.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664875, "uuid": "1995602a-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.221.188", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785634625, "uuid": "ab129da3-8e12-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.225.129", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664892, "uuid": "239ce73a-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.201.115", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785629824, "uuid": "7d7bc72b-8e07-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.7.132", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664865, "uuid": "13af0e63-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.84.130", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664892, "uuid": "23c2a3c9-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "8.134.218.77", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664893, "uuid": "23f77c5b-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "81.225.195.11", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1785664865, "uuid": "13b42d68-8e59-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.227.173.42", "Tag": [] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1785673386, "uuid": "eaa370ad-8e6c-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "cim-kolea.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676925, "uuid": "27f96658-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "directdownloadl.ink" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1785694744, "uuid": "a4efa789-8e9e-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "eclipsebible.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676926, "uuid": "2818beee-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "file.tugou.com.co" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676927, "uuid": "290d2ea5-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "letsgobok.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1785677165, "uuid": "b71b5b87-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "safeuploadz.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1785657187, "uuid": "32ea8a9f-8e47-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "svo-poiskrat.vercel.app" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1785676925, "uuid": "27cdaed2-8e75-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "thenewcoffeshop.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1785645184, "uuid": "40e03a4d-8e2b-11f1-8d7b-82aee05be84a", "comment": "Malware payload delivery host", "value": "wantsellonline.com" } ] } }