{ "Event": { "published": true, "date": "2025-04-18", "threat_level_id": 2, "info": "URLhaus IOCs for 2025-04-18", "timestamp": 1745020988, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "093fb37b-8f0b-4b1d-b03e-57a219b652b2", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1744934526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744934526, "uuid": "7a96c4b2-1aea-4b14-9e63-c6c0bb4e6837", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744934526, "uuid": "c936dc4c-c79b-467a-af30-653b06852448", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744934526, "uuid": "c0c1bcc5-d3ef-4c02-bc86-c17e843fbd7b", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744934526, "uuid": "eca4b624-9cd2-4b33-b2bb-d3d30fe7c351", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744934526, "uuid": "0f4edd63-0f1c-437d-9880-419d96c4ed7a", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc1fcb98-2b73-11ed-9f24-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1744934645, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744934645, "uuid": "8d20abe9-bbe2-4a80-aeed-3884d8325d5e", "comment": "Malware payload", "value": "a72c80f69eb3457b73c0996afdaa6cb5", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744934645, "uuid": "32d66351-bd9c-4dbe-a31a-0d13eecb8e0d", "comment": "Malware payload", "value": "6279ff4fbbb9434eec2f56a30ad97e634d4f75f91c526e06b47105cc2d088c46", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744934645, "uuid": "07731ab1-8ed1-4a26-85f3-32dcad592a02", "value": "T12B64C08AEE01AF25E9C126BAFE5F034973634B6CD3EBB111E920872537CA55B4F360", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744934645, "uuid": "01b2ce5e-51b7-4961-b8d3-3f8b7e4b6161", "value": "6144:p3lOYoaja8xzx/0wsxzSi/abE5wKSDP99zBa77oNsKqqfPqOJ:p1CG/jsxzX/abEDSDP99zBa/HKqoPqOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744934645, "uuid": "b8048339-8e2a-4d10-8d41-959b96f3bfb4", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744934645, "uuid": "f2dbe900-d68a-4d07-833e-181edc06339f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfb10683-1be8-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744934744, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744934744, "uuid": "33ba3ff1-6a59-4c86-b31a-a2d63b36cda4", "comment": "Malware payload (Mirai)", "value": "893bb2905903018a77945352abe14443", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744934744, "uuid": "669829dd-eb46-4f1e-a826-9d9b4d234e60", "comment": "Malware payload (Mirai)", "value": "dd9e6727f455631773426ae08a9fa160c4e4272e4aa9f4dddfc5fcccc8deb73e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744934744, "uuid": "bf551adf-ec63-459b-931a-562941fe4e7a", "value": "T1FDB39589FE54936DC7E2B7FEEF1C02CD363A0B98B3E679164E32065533C9B2565260", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744934744, "uuid": "3cd74fe1-16de-492f-8b2c-f0be60640719", "value": "3072:QvKlt4AhkklJxrYGAKg6E9FgRhBtYVx0:QEhfJxjdpTRhnY70", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744934744, "uuid": "ac144093-3948-4960-8156-67af99527c7c", "value": 118124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744934744, "uuid": "518efab7-5159-47c6-a4a9-b1ab3253b2d7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef10c39d-1be2-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744935347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744935347, "uuid": "1d5e5c80-4480-42ec-9439-7718267b78da", "comment": "Malware payload", "value": "a51b21780e21d3f412e500e5eb261e0e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744935347, "uuid": "8ca8fb02-e0dc-4364-9e68-ed636dee11c3", "comment": "Malware payload", "value": "d1973b2287e1e1fde4d51df1463d078e8df32c53afd878269bfbc2a8da98da8d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744935347, "uuid": "d605d69f-ff62-432d-8805-def99d613c19", "value": "T11DF3EE2D7E21BB7DE6A882314BFA6FB8C35511D336E1D680E17DC6185EB025C0C9EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744935347, "uuid": "c681f185-76d2-4237-8d41-d2712aba61d5", "value": "1536:jDtzZCvsuafmbo++/vqIf9x09OZ2pAkvMltNSzRKdfGpthbhv2gfGlW/xn5uYdop:qkVmpAkvMLNrSobNplYuc6xI6x7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744935347, "uuid": "b26f612d-fd9d-467c-8c38-9214de1d2714", "value": 169956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744935347, "uuid": "b6aaf7ce-73d3-4701-83ee-f18b84baae69", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "448cd536-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1744935710, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744935710, "uuid": "3b365ee1-7312-4aa0-8c4c-f3bd6c33c0a5", "comment": "Malware payload", "value": "a942530b3fc2213ad0de0731fe417f2e", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744935710, "uuid": "bd2bf0c5-063f-462f-9790-d9bb8aa386a4", "comment": "Malware payload", "value": "a6ffc5f875944f63ee69dcf49460d2b7392ce9214c3c5f7a3b34a80ed1ac6680", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744935710, "uuid": "c5923511-24b0-4230-9616-ca432167e28a", "value": "0B73121613A925A152314AF1E7FE6F88F54D2A6C8FF1AC24BC217C68ED3336D1CD5518", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744935710, "uuid": "a11b0baa-5d07-40b9-acad-fd07e521513c", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/Jl:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744935710, "uuid": "3dcc1424-618e-4053-8dc8-b67df9cc009e", "value": 76744, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efd0d122-1beb-11f0-82df-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1744936060, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744936060, "uuid": "3d939931-c9dd-4021-84b2-0052dac6e5ac", "comment": "Malware payload (Stealc)", "value": "156934a0b635550255a3841f5dd1e7dd", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744936060, "uuid": "cda5ed94-46c0-4687-8ca3-6f09ce260b90", "comment": "Malware payload (Stealc)", "value": "10a3f988c815bc05fc60c711bc097cbd9ae2043112d954e0206535efd23bbbaa", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744936060, "uuid": "5cad6356-1a39-4bd6-bdb4-4de16a1b393a", "value": "T1E5C53399FBE02C3BE66EC2F443D3AB11B7D4950102D5C27813826BFABE9398F57641", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744936060, "uuid": "32c7f02a-ea25-4ef9-81d9-b0c07f16d923", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744936060, "uuid": "ca550d05-6f57-4644-8983-46df9640cb70", "value": "49152:57NvQPSk1C70rsKWkYn8P4ozpuCLA9601x3Sq5Q0HOiwShWS:XQPO0Q3kY8P4ozpRR0CaBd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744936060, "uuid": "89caae97-4b2e-49b5-9d37-6bffe02073d6", "value": 2501120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744936060, "uuid": "75151fcc-2609-4294-8eb2-c4276360f6ca", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "852bd0ac-1bed-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744936740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744936740, "uuid": "1a68038f-6191-466c-addb-cb3b2842cecf", "comment": "Malware payload (Mirai)", "value": "69e160423e7ee896a4a2be9ac0521601", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744936740, "uuid": "92462b01-979c-4063-8e25-57b1a6e629a7", "comment": "Malware payload (Mirai)", "value": "2a6e4b5df5f8f27bf01bfd417bbb573df30b13ab1da94fe78d1c05cc420fa177", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744936740, "uuid": "5e3826fb-bddb-48b0-a529-e16fafa1b01b", "value": "T142F300AAAB715EB7EC0DCD37019D4605118C925A92DE2F6FF6A4C618E38BD0F49D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744936740, "uuid": "57d3f4fc-5c4b-467c-a5e3-cb534bb6da9a", "value": "1536:FvcoaDL6umz1wyqZE4ydVlg28rOR9vT/t0ElkTFur2PPaJnvZJ/CKBycdoXFxH/w:Fv3+yH9hR/AKQFxH/ql", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744936740, "uuid": "51bbf8dd-df1b-49bf-9c8a-a7d3af026c59", "value": 169780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744936740, "uuid": "cbfb64ed-c16e-4b48-b968-4ff6dab89ff4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1744937105, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744937105, "uuid": "2daab091-e051-458a-a8e5-a8db10697a69", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744937105, "uuid": "40a5c993-f694-45d2-b516-70273652d3c3", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744937105, "uuid": "321f5225-7a00-4d03-9e40-b2eb41e710e9", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744937105, "uuid": "64bd9306-5a54-4e82-a322-569bfef0085c", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744937105, "uuid": "49432c50-5fa9-40b1-b192-da8910fee4ba", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e29e784d-1bee-11f0-82df-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1744937326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744937326, "uuid": "ced9727d-ea91-4071-8f5b-2c8b111acd7b", "comment": "Malware payload (LummaStealer)", "value": "46fc8b01e22c271cbe978321b385b453", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744937326, "uuid": "22969dcd-9e9f-42a1-8849-c43247615936", "comment": "Malware payload (LummaStealer)", "value": "2b9e05a57b392f0353aee16bb2c812c19fd758f796acdc93133ede4a045503c2", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744937326, "uuid": "6c451afe-30e2-496a-a945-a6ccd5cc3110", "value": "T1D79533971BC5F9FDF0494A3792BBB838A14EBF20087096789D5BB75228F251FD9241", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744937326, "uuid": "8207684b-3526-4db1-9e67-cad4330c1a09", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744937326, "uuid": "d612d300-53e8-4f68-b77d-2c52489d91b1", "value": "49152:TzeubaYiYdJ36vYl8GmQEmXwo+lfeWPO:G0aYRL36MmAXsFee", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744937326, "uuid": "c6fd6ff2-31e0-4c5a-bbcd-ed1832b9246c", "value": 1900544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744937326, "uuid": "dbc0b23c-e231-431b-9d2d-fa1233af31e1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "168b15e8-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1744937459, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744937459, "uuid": "8a31d1e8-3a07-4b95-a6e3-dc87a4a94887", "comment": "Malware payload", "value": "c73634570e4a70d7040fabcad0ea2773", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744937459, "uuid": "763d477d-3c04-41d8-9599-4c13ffa54e11", "comment": "Malware payload", "value": "a7576c44f6f25dc87fcc803b0e463e385c13a048169536a7c7a5de804b0891ef", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744937459, "uuid": "d5da27ff-3409-4ee3-9492-33ec49c5d1a1", "value": "FA43124623662AB6857149F0A3FCFF8EE24A3E58CFF55C197C107A28A93136D2CC481C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744937459, "uuid": "941a980a-1278-4363-ae61-90d3227fee45", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyqe:yYI0ARqw1qAEv7UIFM8oJorFquyje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744937459, "uuid": "f9e6be47-2f12-40bb-aa67-287b8aa0f8a9", "value": 57920, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7963646-1bef-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744937710, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744937710, "uuid": "bae72e95-6a8f-43f6-9df4-54a401ebcecc", "comment": "Malware payload (Mirai)", "value": "d3f67e28376d76acb2aef7f7b7a3b4fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744937710, "uuid": "185db22c-28bb-4b91-8715-f3af736274c2", "comment": "Malware payload (Mirai)", "value": "fd2d7a9acd6cf8d738f8b35d6515270c53feca27291f4e1d1c4b2e21e235eaf0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744937710, "uuid": "3a1e9e15-618d-44ac-8d78-4ea2f12105ab", "value": "T1A943029140BED2B2FA53283BD69542B5857EC9FD843831363E8C472E6A652D52E334", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744937710, "uuid": "572f20b6-c79a-4a26-8a2f-a47514fbe5c8", "value": "1536:SCMl/BQ5vJ6bCYugCNTFgEzidLHjyyFTiUsncb:SCKW5vJUvuzLeLjxb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744937710, "uuid": "6acd5704-08e7-42f5-88e1-4b322e44ae11", "value": 58472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744937710, "uuid": "d0702767-f10e-4af7-b76a-a5e9b2e54999", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09eaa774-1bf0-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744937822, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744937822, "uuid": "0ce26ba1-9a2b-4c81-84f8-c8d2986f6d53", "comment": "Malware payload (Mirai)", "value": "bc74412aef540945a865a92ec1334e98", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744937822, "uuid": "9362add6-1d91-45fc-a6e2-eca83a4f86aa", "comment": "Malware payload (Mirai)", "value": "e6fda9f108148ad5675a359107bc6b18ded6665c222be218eba31ffae7e75314", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744937822, "uuid": "89aee3b9-020f-4532-9073-ed649b6ec885", "value": "T12CE2D010E3950E9BEEBCFD340D6595E473222E87371A8DD202CABB22558711AEB4CD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744937822, "uuid": "9feb04a2-4530-4826-9ba0-d3319358ddb7", "value": "768:yLfehjoAMkyoYLfJYKMXFNNggvbHMO+rQwbYPn4uVcqgw09YQD:yLfeh86ySRXFzggvrZ+rQAYf4u+qgw0r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744937822, "uuid": "22d86091-f320-48c4-b453-631a8d98d5b8", "value": 32308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744937822, "uuid": "29f3f64b-a008-4b3d-98d1-2eb7bfeb3f4b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "649cc654-1bf1-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744938403, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744938403, "uuid": "99b60633-95f9-43ca-a89e-6d545b802012", "comment": "Malware payload (Mirai)", "value": "8672f232565a4183e5448d1013649d87", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744938403, "uuid": "d308ad4c-47e1-468e-9c5a-ce910f85bcb6", "comment": "Malware payload (Mirai)", "value": "90f364b497173267cc9908a093c246d584281bb05ff66e411527d492a614ea22", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744938403, "uuid": "e43d4d29-94e6-4c0b-b0da-89a69d6214a7", "value": "T19EB39D9BF64715A0C86346F007CB5BEE7E2323819F0795E33C2D257928762DF5906B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744938403, "uuid": "23cc97c9-3735-46b2-a374-361df2c92113", "value": "1536:Zxurnny7uI9qi3NLXRkZFQW3zA5pxCE4ngQgJ+/LW5:3uzyiiqi97RkP3zAcngQM+q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744938403, "uuid": "6c30df9b-a9ae-4a47-ad4a-70f627a675c5", "value": 108256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744938403, "uuid": "ea9bf608-8c2d-44ad-a158-c827188dccff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1744938545, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744938545, "uuid": "4c620d0f-5364-4131-91e9-f867297c48aa", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744938545, "uuid": "8c4dc36a-8791-4c70-a4b7-795d58f032d0", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744938545, "uuid": "e2a26b41-acf1-440c-a04f-61bcd91817e5", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744938545, "uuid": "9c41b01d-d76b-4891-ada3-54f3f98abfc9", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744938545, "uuid": "f3c2bd7b-1b84-46e3-ba78-67153ccbd447", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "012077a8-1bf2-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744938666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744938666, "uuid": "e2872dd4-bf44-43ed-a987-ae2540cd1f57", "comment": "Malware payload (Mirai)", "value": "c0781f87693e755a1731e8e2efbf890c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744938666, "uuid": "2f2ab2f0-c87f-45b0-b532-9171227a3d95", "comment": "Malware payload (Mirai)", "value": "9e83ebdfef872de6547e698ed64f3734b436d3a5011d372e66157e80838806bb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744938666, "uuid": "eece9090-a7a8-4910-b799-f27ee720128e", "value": "T13DF2F1129183D964C0B21E76DE0E4A47F01C06EC56FC3BB6E07B9C94DDC858A3B79A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744938666, "uuid": "6bac2367-3cb4-4096-a285-0ac1f49ec19d", "value": "768:sen8Qig8mGFGt7LkPrP0UQcb4u9VV/WU7QmbNkxbJLNDKbzuT9q3UELK5B:NnP+OhYzP9tdUwKJ16z5LMB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744938666, "uuid": "869444ee-76be-438c-8e68-218104a49a59", "value": 36852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744938666, "uuid": "57ddf06c-3f3c-4712-9c4d-f27cbe426666", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ad61fb6-1bf2-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744938736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744938736, "uuid": "43485f22-eb80-4414-a1d6-15d45dc7efd4", "comment": "Malware payload (Mirai)", "value": "2bf1a56852104576d2f3a7f12a3de2d7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744938736, "uuid": "66af7e18-84b6-47d2-b5e8-22f5a5c8f051", "comment": "Malware payload (Mirai)", "value": "996d10435b399727857445ded31467996de7025c8e41647913def4e4b41f3cce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744938736, "uuid": "545a4edc-3b1f-4795-90f5-98cb3ec157f1", "value": "T1DBE2E125FA9D793986300C3694F9C408729E033D4BEA3635D77D63D4B0C26569878D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744938736, "uuid": "e9bc0072-93fd-4612-bb89-ef0e2a7e75f6", "value": "768:4T9X/LwIVZJ2jMmSN2l89wjcoT8IwKuc6xXGCP59h4TUs3Uozj:ysIVZJcMmSN1ucC8h/Rdh4Txzj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744938736, "uuid": "732be61a-594d-488f-a537-1275824a633f", "value": 33324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744938736, "uuid": "6d806c36-70fa-4379-b0cf-e9d7adadc93b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c74a28bc-1bf2-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744938998, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744938998, "uuid": "2d7533d8-563c-4135-9d84-2abd0714fa08", "comment": "Malware payload (Mirai)", "value": "60981062f0a32fa37648d0f3d63147e5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744938998, "uuid": "b4c04f98-7661-429e-8223-a0be73175c63", "comment": "Malware payload (Mirai)", "value": "9e2ab19ac67f94ba28d55974460661cf332bcd452eda042392842d9ec060dbaf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744938998, "uuid": "bb25d9fc-3126-4dce-a023-3454e79d4c97", "value": "T17CE2F15AE59F00A5D12001BD0B05E50E68B95AC4AFC8BF6B5FED518964B39FCB0A58", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744938998, "uuid": "9be4192d-3e8a-4e9b-a72c-c4533ca92796", "value": "768:ypTdmdDu1aJf6aoSxGzI1cfPIkqYDSIvgw3DNX/Dfztq:y9df1aJpo+G01cfPmMNX/dq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744938998, "uuid": "93eeed02-d2e3-41e6-a1bb-e04e0904204d", "value": 32056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744938998, "uuid": "20508272-3793-4abb-bc09-dd1158ff359e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83dead25-1bf3-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744939315, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744939315, "uuid": "7741f487-8607-47f3-9b8b-f3bb3b98b24a", "comment": "Malware payload (Mirai)", "value": "86194a169581f63c0a51ae6aa3026924", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744939315, "uuid": "8e3904f0-4459-4eb7-814a-017e428b8654", "comment": "Malware payload (Mirai)", "value": "23f60948c2b77a754d8497a51765272bbc89380eb706519ae8b09618376fe1b2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744939315, "uuid": "e34a7390-01d5-4072-b8a3-aba8686ff682", "value": "T1E8539EB7DC2A5E44C0568170B8788E751F23A1C493575EBB2AB5C2B59493CACFA02F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744939315, "uuid": "0926f823-03af-41db-92bb-097d3e1f37f3", "value": "1536:baFJtNQfaDaGf4IK7AU4TSxk82CF9cbAr2OBVHS2:bOHNQsaGf4v7KSxk82Wi82eVy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744939315, "uuid": "ac2eb583-52f6-4332-a56b-7b58e0466dff", "value": 61244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744939315, "uuid": "59836f78-21ea-4dc9-b8b2-57948a429af0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c333f097-1bf4-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744939850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744939850, "uuid": "be411ab7-71a4-448e-ae0a-85117eb64552", "comment": "Malware payload", "value": "06d3c12ba55e54418bebb896a29b6ad0", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744939850, "uuid": "0741d109-7e84-4d4b-8e7d-9e35f2566c22", "comment": "Malware payload", "value": "3c8b0aa0398469d462f3095fed1739a8cdfbd5e0196fe6ed6f057e731bf0c15e", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744939850, "uuid": "8ec3d074-11d9-4716-b869-ad3090e3b414", "value": "T1F595335CCE073CBAEAED2FF1505BA314FE385F06674A023899F135E54225E2EBD958", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744939850, "uuid": "509dbb45-141a-4a14-970a-64edbb706bd0", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744939850, "uuid": "cb64a3a1-d8bd-48c6-9565-f86e162d4524", "value": "49152:ko5CARA3DmWAY6g6F72tS9MGItOfpk9E9q6L:kENe5q2tS9sOfpoE9r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744939850, "uuid": "04d32935-329b-4c96-87a9-f7a923324f2b", "value": 1887232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744939850, "uuid": "be5b06f7-9dbd-4219-a8aa-92b5d76727a3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "172f6ce2-1bf5-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1744939991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744939991, "uuid": "429d136a-684d-428e-8c16-e757ddafdbdc", "comment": "Malware payload (CredentialFlusher)", "value": "b342a42c34f72ed9bbf6e01ad505b382", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744939991, "uuid": "65f78c39-4764-4640-b569-7659a1f58fff", "comment": "Malware payload (CredentialFlusher)", "value": "b5eba07d35f5e105d1165384ced2d7ef492b99ff31eda4263e8a9a7aa133f450", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744939991, "uuid": "1ad9383a-71c3-4b8e-87a9-db8c60ef9abe", "value": "T1CD259E027391C062FFAB92334F5AF6515BBC69260123E61F13981D7ABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744939991, "uuid": "3e24b286-fad4-4187-ab13-a9f7829a1948", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744939991, "uuid": "43daf33f-e461-4e49-9539-3cfa508486d7", "value": "24576:OqDEvCTbMWu7rQYlBQcBiT6rprG8a+Su9:OTvC/MTQYxsWR7a+S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744939991, "uuid": "2c450979-b6cb-432b-8f09-d843a01f48eb", "value": 971776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744939991, "uuid": "e364e672-1257-4b21-85d4-2d0ddc84a0bf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "477d886d-1bf5-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744940072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744940072, "uuid": "ebd42642-57a7-479d-a844-49f530eb0e36", "comment": "Malware payload (Mirai)", "value": "6e6cb965162e781683a2c75a4480864e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744940072, "uuid": "1365fd4a-9860-46ea-8c52-20a44479271b", "comment": "Malware payload (Mirai)", "value": "635516217f14af446dc2b66c7b4a17a61f2d513be665e8b9bab6258976fbaefd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744940072, "uuid": "fa2c3cd5-c31a-4965-9374-84e30880ec62", "value": "T135F2E05C21089AFCF8B689342CF5DB8C25951350F943FA8EA8A1EFF20C175AA35D37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744940072, "uuid": "ce7d4191-4749-4864-973e-d026ad25156d", "value": "768:K7bkYWG58DaBHMiJ0tULfpRUxxuDzuiNahk2JgGlzDpbuR1JF:KfkQ8DaBZfpR3zkxVJuH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744940072, "uuid": "2b1a7e39-ae3b-480b-99b8-9007e92b3457", "value": 34740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744940072, "uuid": "44a856e5-a3f8-4ad5-a398-ef19f7e3c307", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5bbe9416-1bf6-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744940536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744940536, "uuid": "00bf7fa5-0260-4cef-9a5a-54f2d2af0a26", "comment": "Malware payload", "value": "de1dbb4adb6317dfa7e6534567a4c29e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744940536, "uuid": "441fae75-70c3-4492-a4e9-e1ad3d88e9dd", "comment": "Malware payload", "value": "1f658696223dd55edfb52133d3c4a812e4fca81292b45af1dad26ce177645149", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744940536, "uuid": "c869c11c-2a35-40e8-9173-1911aff5197c", "value": "T14A34F0BDEBC4BD0F54DEEA633B73A28270594A02273106FBAB70B755C5A5FB410B85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744940536, "uuid": "c3865350-8729-4358-8bd2-986e448998d1", "value": "6144:l5LX2SyPWHagOYS1hz+9cySMQHM23Ez8Dd5RSABYOZU:LLX2PPW6ENwM723GIDxBr2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744940536, "uuid": "c03897f5-cd30-493b-98a9-e73efb05826d", "value": 247872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744940536, "uuid": "70271a94-9b84-44a7-9b4a-bc26ec089ec0", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36257a0c-1bf8-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744941332, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744941332, "uuid": "6c4ea799-ae75-4d30-8d29-f422036e19e8", "comment": "Malware payload (Mirai)", "value": "ae8bb43e19fc707ae606cd434150b776", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744941332, "uuid": "587e88b7-df6c-4f84-ab86-ab7fc334fa4a", "comment": "Malware payload (Mirai)", "value": "5199493171a36a2a1ba7ddedb814caafb57cd1bcb047ba9dc8253375e1a8b418", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744941332, "uuid": "f18cb7d4-4e2a-447b-b6f6-74d7cc2687a1", "value": "T1A9B30B8DA8616B25C1E969BAFE5D44CD330217FCD2EA71158D065F20A78F88D0E3EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744941332, "uuid": "e2957a02-5fe6-4f40-a7c6-0da1d4485ef0", "value": "1536:f/n9XhMzD/MuFXC5sxK6/1jgnmx6uMSOiouOOssr4t9U3wR5S2rhgroZ/8vcQ+Jt:Zh+MA3xK6/1kmx6ZSEGssLZ2rhRNLQi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744941332, "uuid": "bc586406-91dd-48fd-9e52-cb879a4ee6ed", "value": 115464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744941332, "uuid": "d3865924-3968-4d80-a0bf-62c905f08af1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d732f9d-1bf8-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744941451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744941451, "uuid": "3fb8563a-32d4-4fd2-b907-ab482a8880f4", "comment": "Malware payload", "value": "b65339bd3830c7d1fe37faf34f6edc4a", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744941451, "uuid": "cbe3d0b2-d612-4fa8-85be-1d65898585d0", "comment": "Malware payload", "value": "a6bef16e1015b9bac15bbbb795ef87e0f5cde37e13914c1766981871fda2c115", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744941451, "uuid": "f8b64459-790b-43f0-8610-8005cdb00094", "value": "T1B9E3195E6AA15F7CF218C6325BFB8D38A2882B961AD1D941D65CE9044E2070FDC1FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744941451, "uuid": "5ccfa7f1-9393-4a14-9cca-b6b2c8739c71", "value": "3072:+8TGfmKHmUlU7WU9DnovT9RcroVLfw+C2mSAsY9RuZCyLFth+LeX:ZTQmKHmUlU7W4DnKckVLfw+C2mSAsY98", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744941451, "uuid": "196a2bed-4881-4de6-8924-5b095acd88de", "value": 154808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744941451, "uuid": "1a4cf3d5-468b-4574-9d10-b0318831c607", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7394212-1bf9-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744942005, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744942005, "uuid": "e1a9e09d-cb0e-4417-a285-75a46f8ce809", "comment": "Malware payload", "value": "327ef4e63ddf05872f937753028257cd", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744942005, "uuid": "09e4bb3b-2325-4a6b-b983-e37b329e9aa9", "comment": "Malware payload", "value": "ec8594a98d3546f991947e2bb1c8ffc8ce1a3c9d0f6aa890639b4152d9b72d20", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744942005, "uuid": "9bc298a6-bc36-44f1-8e69-ea23d8bd03e5", "value": "T19624E075595B3034EAE6F71DC2CBA2DA40ED19228D676B7E2973BFD323A8512F081C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744942005, "uuid": "c32ba3ff-4e18-4560-942c-f425b173d5fb", "value": "3072:/CcAFGWwO2IPumP82i0ZuQYubzPE1kMOJJC8c8t5pjF3+eKTsXwc9fp:/CcUGSGOGiupubbESMyZtT2fAp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744942005, "uuid": "9bcc3461-f4de-486c-9fa8-22955625fac5", "value": 211038, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744942005, "uuid": "cc16fbf3-5616-4fc2-8dbb-e397a43960a4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8bace29-1bf9-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744942007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744942007, "uuid": "e53b822a-ed97-4a80-890f-3e302f95c4e8", "comment": "Malware payload (Mirai)", "value": "024007476b22a9e946303740010f5cb6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744942007, "uuid": "6beba597-71a0-4a73-ad72-a16b56820f85", "comment": "Malware payload (Mirai)", "value": "0c09088ee8e0879a46888cb47d54ed514153de85cf98510897310b8ebc175151", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744942007, "uuid": "a5a408ab-251b-4f65-9fdf-37caca8c8570", "value": "T15C72D1277229240BD58A42F306D54F8DA537AA3FB586C87B24E9BDC44416D8673AF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744942007, "uuid": "34adcc56-0838-4334-896a-29424ca01def", "value": "384:OO+XgcAkCdd0nyDedy1VWZNr0rJcESnQOm7FNhUNcq6pzhTp/ftB5:OOKkdd0yDeIKZ0rkGFScXpzdR5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744942007, "uuid": "aa5ce283-f475-4b2d-9861-972ea15bf4b0", "value": 16860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744942007, "uuid": "42f0538f-fdba-46ff-8c42-3f70ac8e5b67", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "301edd7a-1bfa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744942181, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744942181, "uuid": "4f7dcf4f-b63b-4e42-85ff-d0d9249cb089", "comment": "Malware payload (Mirai)", "value": "712589c12e4fbe96757107617cd6e379", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744942181, "uuid": "492ff2f5-4e03-4335-a677-3fcd1f353f6e", "comment": "Malware payload (Mirai)", "value": "48e573da597eb2b159bcf14d39627efb2ec0bccacd259dc25479c1db980464c1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744942181, "uuid": "d1e386c5-854c-4328-91c1-e055ebf787fc", "value": "T12673198BF401DD7DF80FD33B1457090AB671A3D146831B3667A7BAA7FC721991822E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744942181, "uuid": "6a1a8ee8-ae54-4bb0-ac65-76aaba9132b6", "value": "1536:blIhrNssU0pf5R8m1C6/m8GD2iAVVTnmlxIZBPnUknhZ:blCrNpU0pf5L1reDnAbPZBPUkhZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744942181, "uuid": "0a00d812-4b96-44d2-8602-63760468f57b", "value": 77752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744942181, "uuid": "0622465d-20e5-4f9f-bda9-1271a4202860", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b1384b4-1bfa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744942280, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744942280, "uuid": "a7599424-f68b-4ed7-91b4-c4ff87ebf1ee", "comment": "Malware payload (Mirai)", "value": "646498051f1aee2e36ded2a0cb032257", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744942280, "uuid": "62d18820-e57b-4eac-9011-b3b4fa2d82a9", "comment": "Malware payload (Mirai)", "value": "37ef41d0a6bc61d4c4b080a523ef6ca49c607070181dbdbf8e486a5639f9a69d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744942280, "uuid": "1b99ca54-7c71-42ff-b25f-28400d0795eb", "value": "T18E732A32BA361D27C4D1647A21F70B25F6B647DA22AC851B3DB10E9EBF616403543E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744942280, "uuid": "b503fbc5-69d5-43f8-a3d8-33e9567f6e86", "value": "1536:JfPcKF+anYX+Yg9aLnSytoMhOYk5JT8zAoGKtthlSI:JnffIt8YUJs9GI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744942280, "uuid": "72d05ddd-d9ab-4aad-9753-92b832567930", "value": 73528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744942280, "uuid": "8ad3b4d0-8f55-4c2f-a0d2-792333483aba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6f48c77-1bfa-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744942380, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744942380, "uuid": "0063176e-c556-40c4-957d-a0eb188aa631", "comment": "Malware payload", "value": "1ed7269312d6bb9b940743c077bd83aa", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744942380, "uuid": "f6a72025-5cf6-483d-87e5-5372b50776f8", "comment": "Malware payload", "value": "014bce445349169798dfc0f8c7629964d3e2b2f40eb299c6ef5220b3651bf5d4", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744942380, "uuid": "8f4f583b-cd4a-4307-bae2-62b20e3fd352", "value": "T13704C6456FA13FFBD40FCD3341E98E1911AC4A4AA3A6AF7B5F28D904F68614A09D3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744942380, "uuid": "819a0859-cd26-4d26-afb8-77858dc110e7", "value": "1536:wZDN0KA5VyaJEVPNpl2fU0P+cuf2uJXzp6w6p3Zte1A90CsEl89bCbDr:wD3yVFEPDKUDcuf2uZc9pe1A2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744942380, "uuid": "45fdb705-8b89-417e-b544-6a0f73c7a2ad", "value": 177848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744942380, "uuid": "baa12cbd-b5ee-4c5e-ae6d-3da48b4a6017", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86ebdde2-1bfc-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744943185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744943185, "uuid": "a727935c-024a-4fee-bcf1-b170c82d2397", "comment": "Malware payload (Mirai)", "value": "6659ee8321e88a55450ef9c4cf21d63d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744943185, "uuid": "71b392f5-2dab-47b0-be60-2a13e90079f3", "comment": "Malware payload (Mirai)", "value": "f4dadc2c978bd8ad3fd18ec0bd632d2e9e99edbf94265ad8148be340272080cf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744943185, "uuid": "ca6bcc87-db32-46ac-bf7f-9d88e9318035", "value": "T1D5F2F1B8F9D03441CCDC68B8A7AC17A63218B3D0B2BB1E7DF3618C591A49542F8CB1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744943185, "uuid": "02b2fddb-07da-4a0e-b6fd-1c1c2fb99d1b", "value": "768:uE1S0WelBNymbjuolYyXENxyLtBlNt2JG6+vmqYcXCW4u:u81AQYyUNYLtBl76+vCUou", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744943185, "uuid": "a26943f3-adb4-4c4f-a399-71066f802eb5", "value": 35656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744943185, "uuid": "6b59fd7a-6437-47c5-a4fc-54826329fae3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3d6d536-1bfd-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744943798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744943798, "uuid": "49167594-6793-4984-815a-720982ed1259", "comment": "Malware payload (Mirai)", "value": "9c133a9cd08fd646f5972744418a444e", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744943798, "uuid": "837d5c76-9961-48ee-8528-2377193f2a53", "comment": "Malware payload (Mirai)", "value": "5b3466b4b2495b829c6cc3686a3773ebd1615438624b46c81acb3ac719f3d14e", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744943798, "uuid": "eda19c8a-9428-4031-a792-9180b64d88c5", "value": "T1C0C3094DE892AB15C1EA25B9FE5E448D330707FCD3EA7115CD151B21A3CF94E0A3EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744943798, "uuid": "834f932a-dc1e-4751-8344-08db0203cbd5", "value": "3072:wtWXz4ePuM0429K+Nn2rZWiVJXiIaW0Lt4f5dkMo:wY1En28iTt0Lt4f5dP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744943798, "uuid": "7a8549a4-6b60-4dd5-823c-8e36636ed083", "value": 128036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744943798, "uuid": "e22a4cd3-ed95-4b95-847a-b313b8eabe0e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2dd34e73-1bfe-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744943895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744943895, "uuid": "ca51587f-dcaa-45f0-9799-3b0d1db4d066", "comment": "Malware payload", "value": "3e8d07efa1b0edba834ce75f4f38b0b2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744943895, "uuid": "29cabe2d-ebb6-4ea3-9eca-805d15b88fc9", "comment": "Malware payload", "value": "d259fb38d6e782c39dc72576e4e77125c05f7f710ae6c0e1da7c23618e6e5011", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744943895, "uuid": "ecf76103-490a-48b6-ad1e-f0362e689123", "value": "T1C2B53329DF52BC70E53D597D1EF3AA9AB33BDA2057E4DA001B42CA5267B2A5333143", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744943895, "uuid": "0d7e1041-8727-4f57-a7ad-a7ace94cc8c7", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744943895, "uuid": "c7390b9d-4918-43e6-87bc-9503375ccf9c", "value": "49152:EQmm47iMKz5H+TpMK/xdfD+JM0XutSmLszI6OcRFBngPh3iUSn/SPUraIJhV:XTJ+TTp5+JM0Xs7cFSh3BSUUb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744943895, "uuid": "249f7625-9ced-4aad-9526-692a9fb86ffd", "value": 2444800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744943895, "uuid": "2cf3c62e-ad38-473f-802b-36fad15c98de", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2764590c-1c01-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744945172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945172, "uuid": "8e30d781-f43d-459b-9d01-e1ac90cfef91", "comment": "Malware payload", "value": "e55ef911374d0934c9996f5ca2e8f3df", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945172, "uuid": "b6585a96-12df-41b4-b466-51ff95213c83", "comment": "Malware payload", "value": "890ed4d1fdbf54b78452a39bde7b39caf4645bfa385a127f5ef01620eecfd42d", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744945172, "uuid": "f2dd326d-07cc-4769-a180-4b911c2993aa", "value": "T19253E97766623E0D9233480CB8C5B6C87718C453D4075AEDE9BAA62CC3CBDC691727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744945172, "uuid": "45a3a6f8-1eda-4117-9166-cc78df42d1bb", "value": "768:aA1fho1SnvHgRNv+f5AfpUxnHeob4f1u0eJwO0H+UJF/dVjR1X1t1RB1p+dB2sAP:aA1fho1P6n2vjR1X1t1RB1p+d01J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744945172, "uuid": "93cdb8cf-2441-4a20-9fda-24148ac1744a", "value": 64433, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744945172, "uuid": "f8fc793b-1ed8-4b92-a392-daced9a2b821", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04582871-3de8-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1744945968, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945968, "uuid": "680b07ed-9b68-46ef-a65f-ad7dc98019bc", "comment": "Malware payload", "value": "a170de7ff74dcd7ec2cad3b35efa7315", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "tftp", "colour": "#fd3120", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945968, "uuid": "38b8f71b-63b1-4953-8bbc-f369d8e45d15", "comment": "Malware payload", "value": "6a4d752898fdb63c75c457c7ac6e76e240a3d3f390bc0c12d1018ce6bc97b321", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "tftp", "colour": "#fd3120", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744945968, "uuid": "16fabae0-d03b-43de-92cb-ffbbb4fb37ba", "value": "T1EEA30A96F8A28B56C4C557B7FB4FC75637231795E3DF36038A184E34278B50A8E3AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744945968, "uuid": "49611267-da90-46e6-8cf4-ef3a91d1cd03", "value": "3072:9LOuh02xHCKQnqZ9YfMXKgyLlBZSyPjYvI:FOuhPHCKsqZ9YfM6g23ZJLYvI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744945968, "uuid": "56a3e905-aa72-47c6-9918-c2ce8dabca21", "value": 102400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744945968, "uuid": "00388cea-ee90-4e21-8445-618a79a9e136", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d2b50f3-1c04-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744946417, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744946417, "uuid": "5ac6965b-c8a8-47fc-978a-834a3a1dc92a", "comment": "Malware payload (Mirai)", "value": "40c84664d8af12019bc8a2130a1736ef", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744946417, "uuid": "c5b93106-9e48-4d75-b2bb-858bbff01c08", "comment": "Malware payload (Mirai)", "value": "fa541d909c8eb91af41b75c8aaf34c9ca4b956d225fe5e4838cf8991a15e185d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744946417, "uuid": "f0edb12f-8a44-4869-9dad-b4b1efd690ef", "value": "T17D017FD92C31A556590A9F40E0F23B39B409D2A027605B48EFDD0A7AE6EC74076E6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744946417, "uuid": "78fe3e1c-4db9-40dd-81e8-a7c337cc34d4", "value": "12:0uAaL+dhAEUU+28NItAxMDPNY2iAYKDO9wVAf+n+T4AeRH+bSDAyS2bQ6Q:m0NWSNIy0bYKyP2MNQH6ScySSLQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744946417, "uuid": "11e227b4-3109-47da-a1ae-98454911f655", "value": 662, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744946417, "uuid": "6d729e5f-9fbf-40dc-8c99-876c3f69088e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2071d9bc-1c05-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744946879, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744946879, "uuid": "739c9755-64d0-4e34-9bc1-5806c89034d2", "comment": "Malware payload", "value": "39f233553d1a7fb6e392c180473a9cee", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744946879, "uuid": "bafaa440-043f-45b3-bec9-ca12bcdc52e6", "comment": "Malware payload", "value": "ea9611a0850ff328ce85e7d7c4ed1c27c5997ee9f508ecf8cb5e2ea7edc59bd7", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744946879, "uuid": "ca3e0eea-106d-40b0-92b1-33b3ba35f8b4", "value": "T1149533306E130CC5E0B95F7A8FB667F96BB46B24D1974F5408D8223BC13781BE6984", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744946879, "uuid": "d85937f3-8df5-4d9d-b6b0-67cb02a87fd5", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744946879, "uuid": "f0ea0b0f-3336-421b-92de-382c429cd36a", "value": "49152:1if8HGeQQofoc3ou/jEfrVnDwc0HMkOE/U:1nHBofo5u7EfrVb01OE/U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744946879, "uuid": "7c0c2cc8-e04f-481e-a47d-571f9e29c0bd", "value": 1892352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744946879, "uuid": "d44fd6fa-2230-42c0-a2cc-885217ec6887", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edc9b66e-1c05-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744947223, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744947223, "uuid": "c0a41dcd-1e8e-4fe6-9a08-8b89a8066852", "comment": "Malware payload", "value": "5c24d72ac41dcbaebfe5b350a1f8acea", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744947223, "uuid": "4f552017-3418-42dd-8db8-43404404ba71", "comment": "Malware payload", "value": "d0346e5cdd5e95be123aacd5765c11d21570e02d9fa434a3c193e5e44d76dd44", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744947223, "uuid": "10b12888-7efc-42a0-96c9-00561f8aa79d", "value": "T103B53369E3B30E33C8CEA1750967A32773655742476143E027490EFE3A4E34F776A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744947223, "uuid": "832a1775-6aa3-4f96-94f9-2fcf3ca4cdee", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744947223, "uuid": "e6ac550e-d718-4a76-a171-d8fc6561d473", "value": "49152:iQmXJu5KUCx1bd05ZgeI0O1wy5WLUa3SQLqJHnhyEi:1ZJod05xI0Ouy5mU+BGJHhy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744947223, "uuid": "96cbe22c-ec3e-4502-aa1e-77c44b2b8311", "value": 2431488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744947223, "uuid": "6a9e8657-206f-4b8f-b61b-0362b71c43de", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6208cb79-1c06-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1744947418, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744947418, "uuid": "7b43944f-e179-4e46-843a-154cf6d8a47e", "comment": "Malware payload (CredentialFlusher)", "value": "80dfac6fda6360a26c04f1fcd8f180e4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744947418, "uuid": "01c244a9-cd92-482f-9959-e3ad61aa306a", "comment": "Malware payload (CredentialFlusher)", "value": "36b028a6eab6575346847f775b43a814b4b0be53d0a2e678f2109042f10df782", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744947418, "uuid": "77834be7-0b1b-4d0d-bf76-29680660c738", "value": "T1A625AE0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744947418, "uuid": "4b90794b-ae2b-4f9d-8d49-80b71b5de655", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744947418, "uuid": "2f7fc226-4e3e-4165-bfdf-87c0f85e9617", "value": "24576:uqDEvCTbMWu7rQYlBQcBiT6rprG8aqKi4:uTvC/MTQYxsWR7aqK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744947418, "uuid": "05efa6ca-b7e4-4975-a667-8cd726c2cacf", "value": 969216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744947418, "uuid": "544d44b0-7862-4954-a0fc-fcb45a1a13d0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1744947845, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744947845, "uuid": "8f7fc48b-34ec-4dad-92e9-86a8bca888f4", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744947845, "uuid": "1b84221f-b697-4f9c-88fe-20775ca0a772", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744947845, "uuid": "430ebaa0-fb9a-447f-a85b-96e3cf30c184", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744947845, "uuid": "aa46a322-7d35-4a0a-ae69-497b6a51c541", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744947845, "uuid": "06a0aa55-fa18-4718-9496-f741f4a12b27", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ee2e580-1c0d-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744950366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950366, "uuid": "1cd91dd1-c366-41ee-8fb3-bfff1941b1b2", "comment": "Malware payload (Mirai)", "value": "7a1688e0fe4a749c9d0ba23fbe138b3e", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950366, "uuid": "9db6f4a2-b143-44c4-b134-f0b42dec34fb", "comment": "Malware payload (Mirai)", "value": "9686ecbe2a77d463976a867d72d0140be55d3904a9f5a5ee88330cd25e508610", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950366, "uuid": "b3a2a0de-dde3-4c20-922b-2f45debc8da1", "value": "T1503412CADF35983AEF941A7236E74F4EEC3A3DAA45C3F4A4F4D1818B12A41C5BE561", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950366, "uuid": "c229a703-8278-4aaa-b218-0a95366c9910", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioSa2:p3lOYoaja8xzx/0wsxzSip", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744950366, "uuid": "27621186-f866-4019-a899-c65b92bcb61e", "value": 230408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950366, "uuid": "1a71a096-b069-46d0-8d3e-895876b847a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "948ae8f7-1aaf-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1744950904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950904, "uuid": "72da53f6-3128-40d9-a7bd-d860ac46a699", "comment": "Malware payload (ConnectWise)", "value": "e88b13b5c38aa804d3c6abcb5a479855", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950904, "uuid": "c3b2d09c-87e3-4b5e-a886-f55efdec2453", "comment": "Malware payload (ConnectWise)", "value": "e7c004134a9e3e137248481b2bdd9ece2778159e5936474ea0d031ee060cdca4", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950904, "uuid": "0af39f8c-e13e-4fc3-8355-8cd57b29881f", "value": "T145646D11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950904, "uuid": "e59c9bc1-9e6c-4dcb-a1d4-69c0f0967076", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950904, "uuid": "ae7eb403-d375-463e-bd0c-8780763b219f", "value": "6144:XmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFii9J:u1iw7gryNkSV1hy1Z1u2JLT9J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744950904, "uuid": "3bb4958b-8ae5-4af6-839e-b3a71d6f389e", "value": 312600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950904, "uuid": "b6bb1717-d3be-44a5-9891-11c8c8522dc7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94a16ed3-1aaf-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1744950905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950905, "uuid": "5cfd0e56-cea1-4417-b6c5-a717181d2e7e", "comment": "Malware payload (ConnectWise)", "value": "dea5c5bc8f1a178f91bbdcf8f2544230", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950905, "uuid": "4272c783-cb0c-4d08-b596-5148dc36f79b", "comment": "Malware payload (ConnectWise)", "value": "cbb3c849de922fe3f894e5c8bd9d9d09314b3803d0a8cf80005e9dff60ae35a1", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950905, "uuid": "80ee8bbb-0060-4a81-beac-b3997400ce22", "value": "T1C3646D11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950905, "uuid": "6f9fac41-f347-4cfc-abd4-131b5ab4547e", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950905, "uuid": "355a2959-0835-48b7-8866-8346577dbd67", "value": "6144:XmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFii9:u1iw7gryNkSV1hy1Z1u2JLT9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744950905, "uuid": "5b9bfc18-4494-4521-802e-cfa3cf364e7f", "value": 312600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950905, "uuid": "9e17d469-e19c-40dd-aeb4-c457d2e1940f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9487c6e9-1aaf-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1744950905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950905, "uuid": "de0b7a92-2201-4e8b-9ad1-e9ce50dfc1d4", "comment": "Malware payload (ConnectWise)", "value": "b0ed6f2f4d6d4281ff4448003a3d33dc", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950905, "uuid": "694dfc99-d464-4279-aa41-eb2e2bbc6877", "comment": "Malware payload (ConnectWise)", "value": "cc2180167046bcd3a1fbd846b76235a9f02844d92bd439aaae13280fc4d29351", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950905, "uuid": "9ac77ef0-034d-4836-a855-71c148ad545d", "value": "T13D646D11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950905, "uuid": "336490d5-ff54-4f52-8f77-0cb68bea55fe", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950905, "uuid": "cd16af56-30dc-4d6c-829f-ecab961e4d5d", "value": "6144:XmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFii9:u1iw7gryNkSV1hy1Z1u2JLT9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744950905, "uuid": "b4118403-a123-4c14-bb50-c47468a4c2d4", "value": 312600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950905, "uuid": "1cc5cf4c-a139-4f8f-b706-0147f2fd4438", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "949e1a13-1aaf-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1744950905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950905, "uuid": "a9f3839a-6468-41fd-91f0-2d90ca50f93b", "comment": "Malware payload (ConnectWise)", "value": "762b9ddca6745c314a56bf2673d5127f", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950905, "uuid": "8fc28098-9e08-48a8-96a2-aaeb4621394f", "comment": "Malware payload (ConnectWise)", "value": "bf92439859da3f17cc09b0c868ab6d2fe54cdf9a2755216eb97987ec4f912a25", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950905, "uuid": "b5d871de-0867-44c3-a2c0-fb9df6b99617", "value": "T11E646C11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950905, "uuid": "068e4ff0-06bf-4344-926a-cfc19fd8e27a", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950905, "uuid": "7f58f3a7-54bb-465c-916e-21d2a79f23a7", "value": "6144:nmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFii9:e1iw7gryNkSV1hy1Z1u2JLT9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744950905, "uuid": "a273a790-0f66-4bdf-9053-2e968043dfce", "value": 312584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950905, "uuid": "82c6f5dc-2a75-47bb-ae72-e0ffc1338347", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94a15a4b-1aaf-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1744950905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950905, "uuid": "f69a1575-862f-47f8-aafe-d005b3691ed3", "comment": "Malware payload (ConnectWise)", "value": "c456190a845b18b2de4e6e3b9a6172f5", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950905, "uuid": "91045af4-6c57-4076-86ec-528c288f1cd0", "comment": "Malware payload (ConnectWise)", "value": "5c5778df0c11587eceebdb43a4a65c427d36bd9fd6fe91f98255a7515665b769", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950905, "uuid": "b63bc9d1-3489-4793-bb20-987c7e508ef0", "value": "T1A3646D11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950905, "uuid": "616cd242-cc02-4f93-af98-66c59d6a4472", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950905, "uuid": "9b7d62ec-5343-4bc2-b7ff-ef3e4cd16a32", "value": "6144:XmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFii9:u1iw7gryNkSV1hy1Z1u2JLT9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744950905, "uuid": "877a79a5-de9b-4b6b-bbad-86a9905260cf", "value": 312600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950905, "uuid": "5339a4c4-c4ae-4cc5-857f-2f32d770cfa1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80576a79-1c0e-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744950905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950905, "uuid": "906d37c1-ffd0-409b-b189-a7d0d88d1ed9", "comment": "Malware payload (Gafgyt)", "value": "b2f12b64c27e0357ff1c1b1d0f2c4c17", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950905, "uuid": "05a48e7d-e456-41a8-bf8c-ae5d008d4e8b", "comment": "Malware payload (Gafgyt)", "value": "0ddf770584b69aded30088290238acc16b21f35a1ef3bd43b49195036a22aaeb", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950905, "uuid": "df935a7a-f95a-4c17-b782-dc350c0468c5", "value": "T16D3107CB21B12B70ACE9E9677669A59135D4F08759CB6FC9E8DC38E481CCE14F444B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950905, "uuid": "f76ec6c5-95e3-4ae6-8e16-f44f250885e3", "value": "24:vp5f7DspmpR25pypSpC/pup9QtJpapepU/pPipKEd:vpypmpR25pypSpC/pupsJpapepepKpl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744950905, "uuid": "a2661154-ed47-4b5a-96b4-b455924f1191", "value": 1723, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950905, "uuid": "0e68690d-171d-4253-a73d-02429689af7c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c76631a2-1bb6-11f0-82df-82aee05be84a", "comment": "Malware payload (Emmenhtal)", "timestamp": 1744950906, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950906, "uuid": "66801d69-f63e-4e66-9c2a-19502baba628", "comment": "Malware payload (Emmenhtal)", "value": "ec4c2024caa7328d75691b6aa1ad32a5", "object_relation": "md5", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950906, "uuid": "f6607303-9aee-4338-a025-a26d6d55a497", "comment": "Malware payload (Emmenhtal)", "value": "63f6411c441b630a16149764b58b61300af766e9830dbd850c1bbaa5e4fe6a38", "object_relation": "sha256", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950906, "uuid": "6ba6dfbe-179c-4477-98d3-fd56ed67d6bf", "value": "T11335ED1176EE00E6F5B277B49BBC51A1C92BB8D99B31C2DF1348371E46639C0A9B07", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950906, "uuid": "0c6f7915-bf9a-4e16-b7b1-e6ec314bc71e", "value": "df600280bfaa63bf70c653bfb634058e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950906, "uuid": "647e760a-65a1-4d5b-83b6-e0e37dbdb1ea", "value": "24576:BdBs/qkBdBs/qkidBs/qkedBs/qk9dBs/qk:LBOLBOkBOIBOvBO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744950906, "uuid": "fe5745d2-125f-4559-a36d-ce00572f8dbf", "value": 1082697, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950906, "uuid": "08f6976b-c214-46e3-84f2-3a0716895e54", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8edde6ec-1c0e-11f0-82df-82aee05be84a", "comment": "Malware payload (AurotunStealer)", "timestamp": 1744950930, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950930, "uuid": "6760ddf2-c0b3-41dc-bcb0-71571fef245b", "comment": "Malware payload (AurotunStealer)", "value": "dff1704bb81529e0f7596c501d1282e6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950930, "uuid": "f6486bb8-18cb-447f-a488-5493b3e03ed3", "comment": "Malware payload (AurotunStealer)", "value": "6a423191f13c7ad09144c734664290f31ab57a9edf19432a44016354be3d3128", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950930, "uuid": "df5a7931-ddd1-45d9-bfe6-e5e0afce3f21", "value": "T1BCD69E041D05A2E5E69BCFB1BC6FD96D924B28B53F07CA0BB7F9E42813783E125215", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950930, "uuid": "9cd37c86-444d-4be9-9710-9c156b08e295", "value": "9cbefe68f395e67356e2a5d8d1b285c0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950930, "uuid": "2651f0e2-15f1-45c9-b299-0c09f02ff5c6", "value": "196608:PxQXU0q4k7le19Lj17zAZ6hVY/hiMQURPRnqqmLHo2cXG:Z0U0fk7le19Lj172PXQURPsZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744950930, "uuid": "1bd8d506-8e6e-49d1-92d0-75730bd74b79", "value": 13533680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950930, "uuid": "03c080ae-357c-46d0-b7e2-0e1470d87cfa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ace77d8b-1bc2-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744950990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950990, "uuid": "74c5989e-2c30-4696-9b3e-6d955e4f9562", "comment": "Malware payload", "value": "77a697b7536a3c2a7c838d71f94cedae", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950990, "uuid": "0cf54571-6133-4323-8ecc-23c9a31ece2b", "comment": "Malware payload", "value": "6e965d76a1d994230761fdc06d4c5e4f12222634ede689394437f23cf6914b86", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950990, "uuid": "69d97ea1-92a6-4d7d-9ccc-a5dcc439274c", "value": "T17AD5F1648A6FCD05D0C73D7DDDD491CBB8CA4C4D686680E11FAE3A4A58F7188BA3CD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950990, "uuid": "ca86a2ca-78bd-4fef-b03d-f46b1d5ac733", "value": "49152:2ukReX3M+zqJiANcpi25pl8GpvECmeP9vEx9lh590UM/RVfTTG:sIXcziANT253vEKP9vCeUKZfG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744950990, "uuid": "7d9e8c21-804f-47c1-9299-3edc12c38402", "value": 2907132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950990, "uuid": "e3c6a203-9abe-4502-ab69-7c68c52417bc", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a66a1417-0ef9-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744951084, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951084, "uuid": "7f46122e-0c88-49ca-9bdf-d73f9dbfe57e", "comment": "Malware payload (Mirai)", "value": "f64bb639d4976d9619142099c36575eb", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951084, "uuid": "270c6d22-82a2-48ba-8722-ae6639e98f84", "comment": "Malware payload (Mirai)", "value": "457ac3463c32393c1ca5b86684c1aaa30f883746ca5e42cd5b41d5b0d85fb94e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951084, "uuid": "a78489ac-7f97-46f4-9fa7-ba638a25d5c9", "value": "T12103E855B8839A2BC1D1137ABB6E9B4D376173D4D2CF7713EA2407903ACA51F0C62E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951084, "uuid": "31f4a378-76a5-485e-a97a-dbf028bae3a2", "value": "768:fOvZdQTF962Bn2sG5J9Kg4J0XSH2HE0sol1Hw3:fbF46nxG5JrCCE0E3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744951084, "uuid": "12f9bc41-961b-401f-8a3d-644162ce9f48", "value": 38248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951084, "uuid": "ad1daccb-3172-4aca-af7e-cda2fa152b3a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a71ce529-0ef9-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744951085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "88ea3102-99ab-4fa6-8838-71bd4b6dbe76", "comment": "Malware payload (Mirai)", "value": "34595401eb2adc9bca926e12500256aa", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "c2bb53db-952d-4c25-8657-9ebfa57ec368", "comment": "Malware payload (Mirai)", "value": "448d05b73582cdf2e1cd8ca002a9f117b8aa8dee7a839a7643abe77a802f85ad", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "0301adca-6cb5-4fd2-b65c-098616b6fb35", "value": "T19D04985E6E228F7DF668873547B78E25976C23D623D1D684E2ACD1101F2038E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "c3435d42-56be-4321-b3a1-2a54126ea902", "value": "3072:ItrNi/pZ21DjGJ2VCBejWPjdrlbpOp9Ao9McNr:ItrNupCMOALDb+9tMcNr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744951085, "uuid": "3394d6e2-da59-4aeb-870b-04bd129dedbf", "value": 181932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "32527cae-2198-4a8a-9d1c-5d26c7b94fa6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "803b0b51-0ed8-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744951085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "4dec968a-6934-42ca-acdf-442d4401b4f7", "comment": "Malware payload (Mirai)", "value": "e96ca2e2b4089fb30d096fa062fb5c49", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "40fd0161-00c7-475c-9adf-7c91a1fbc7bb", "comment": "Malware payload (Mirai)", "value": "37655e6676ef77fe577eb4ad5ff1562290bec739bef988fc6aeb36f9802a6700", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "9e25ef0b-f617-4d3d-b1da-f232416a7873", "value": "T16F145B07B5C290FDC4CAC1744B9FB537E933B4AC1239B25B27C4AA229E49E315F6DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "5a439bfa-1271-4a09-bf2e-cfd928ebb8af", "value": "3072:Bbyv2tvwQcH6xz0q/uZ48dRdSMYvMSuv++Z:hyvmw9HPMhMq+Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744951085, "uuid": "1688cbef-b3e8-42dd-99d8-b19e6d370f85", "value": 195184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "fbd8ae71-2b9d-40b8-8c93-5c7b7b7238ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6d9b741-0ef9-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744951085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "0538547b-238a-4949-881d-f0bf601dc554", "comment": "Malware payload (Mirai)", "value": "ac100d58b348c04aa11f58f28736b63d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "48c1acb5-2b32-4e75-84f7-ba75a6d85aae", "comment": "Malware payload (Mirai)", "value": "ca2d87db6526d58c00a5b4d5d6cfd569f5d2f7c1cc1a2c76d5990577b9a7b9fb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "8d1d6511-1e95-43ce-8cf4-f620db0a8caa", "value": "T1A1D31945F8415F23C6C212BBFB5E428D7B2A17E8D2EE72039D255F20379799B0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "9b93053d-ac0b-4298-aa24-d9003181b70f", "value": "1536:qD304awQVkKRuhcK9vqh2ZFTAGN7w4VjCXXT/wMm9e5xdhyNrbul+YwywWlqGJAx:qD3HF7cKeiFTzM4wn7wMm9eTGd41ugU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744951085, "uuid": "459e1623-589e-4ef5-8b7c-a7a7c3b9b880", "value": 137792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "0e4a9cea-d76e-40d9-8f23-56c06e8f4b15", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a72e3ec3-0ef9-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744951085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "367346e5-df0c-4cf4-8b6e-9a09d3f4ace7", "comment": "Malware payload (Mirai)", "value": "e2a880ba260f6adced9b7c72df5cf40e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "c008568c-76c1-4df3-9441-45ffb6183ee2", "comment": "Malware payload (Mirai)", "value": "38027e621a2b5608d47465a785658004d1274354e82a25e735e6bf34d0cabd09", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "4f4165aa-00be-42f8-a08e-45d3e557f832", "value": "T140E329D7F800DDFAF80AE73648570809B230BBD245925B372257797BEC3A1D91867E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "5059d2bd-782d-4461-a9b4-02f0b7724c5a", "value": "3072:T8SVZzFLYq8tSZYFMfP2ATipVHjbisL0785HHyle4EoC:B4wYafJTiDL078RylOoC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744951085, "uuid": "45b86ace-0baa-4056-911f-5db386b2a57d", "value": 153408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "7db8f25d-e82e-4f57-80f8-43a12542ef94", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7ceb425-0ef9-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744951085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "f539f85e-09f2-4355-987a-e9ba4826142a", "comment": "Malware payload (Mirai)", "value": "57204e5e966320e4852a8859a2f47b61", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "326de8c3-fc00-4229-b9e7-34fc54afc3ab", "comment": "Malware payload (Mirai)", "value": "45c3040bb3b4d691f36366bce288bc953d13d2174d7ad33e5521d0c6e6695e76", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "4e42553f-3fde-4361-81b7-bdabec749596", "value": "T10CC36B73C826AF58C555D0B8B4B08FB92F53A591828B2FBA15B7C2B48047DCDF505B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "15362d4f-e6c7-4f0c-9db3-d8613bdc2244", "value": "1536:kamgAGMAOOP4yffDQ+WrCXKw3F6eQTs71kOWaaPNTv2nc4F:kIAsP48DWrjwCTseOWHPNTQc4F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744951085, "uuid": "9189058c-c4a9-458a-98c7-5cf51a72f4e6", "value": 121440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "b7a84091-6067-4329-9183-70d1ccd0d005", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a73cb5b7-0ef9-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744951085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "3f9fb2dc-9c37-4250-afef-37f89851a6e1", "comment": "Malware payload (Mirai)", "value": "581eeac3a57d7f83ca6ef120098790cd", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "550e270d-5073-4b55-8a8c-2a54ba6cbb27", "comment": "Malware payload (Mirai)", "value": "e046eae1f9862254c2126c741696f6f3a7ccb1682382e6a4ec43a0b07cd594f3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "a3bd7521-1eba-484e-a2ac-d04eb4cf2ac2", "value": "T19804C61AAB510FBBDCABCE3706E90B0139CCA55722A53B363674D528F54B50B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "87136f04-4173-41bb-91b5-0b3bdd41d838", "value": "3072:4IV+WaMfBYzSJvB0l7Jnw5djxO6ehmuY8j5Z:4IVdaw2SGwzjx3bM5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744951085, "uuid": "7a6412ac-6b2f-4c33-a41d-6b698c2e78a4", "value": 181932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "1a2ca5b9-d067-4028-864a-2840953a50de", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8a87db4-0ef9-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744951085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "14a13403-1133-498a-8260-26bf99b771d7", "comment": "Malware payload (Mirai)", "value": "195675d92dae0688673d2986243ffa96", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "0b59b002-c79c-4ea7-917b-f909a86290f6", "comment": "Malware payload (Mirai)", "value": "3698882933571d7fd599291ad8778f5ecfd8015c0cecccbbb2484af69ed5e5f4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "c9e1128f-4b89-4826-ac42-f0d49a34a119", "value": "T12A042A56EA414B13C0D727B9FADF424533239B9497EB3306A528AFB43F8379E4E225", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "44bb7b87-a821-4d78-947b-56e404897c62", "value": "3072:esKTidTWhxZ5oI6aKwd4Ne3BZhnQBFIQPUhqo6M/RJsCs905Pz:esKWWhP5D6aKwd4NexEBFIQPyL6M/RJZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744951085, "uuid": "2b519833-2e2c-4514-a47d-ddbc09f53c25", "value": 184492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "9c9c5ac5-0142-43af-a751-9ad5c9b2f63b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a75c899a-0ef9-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744951085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "5fe0bfe8-71b6-43bf-9485-d9849d07860c", "comment": "Malware payload (Mirai)", "value": "5c5666bc417203a4f70218c88fc84df3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "3bc60952-0ba4-4003-b84d-a5ee6aac5458", "comment": "Malware payload (Mirai)", "value": "0c499a0a944b9d28b259e55f4c5c3e5d6eaaeb6105f9b2c7f94b6c44fb93b319", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "7eca0c7a-0efc-48bf-b0f2-5c44d920f292", "value": "T1AAE31B56F8819B12D5C111BAFE1E124E37131BB8E2DE72129D246F707B8B97B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "b9edf50d-fd86-428b-a1a9-519d69e0a662", "value": "3072:Hqkn7VUXUAtwUZfXairOH3acuvFIJiKDVBwU:Kkn7ViLrfXxrOXaJbKDVBwU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744951085, "uuid": "5a909d62-a168-4e22-a587-9d33ae3389e7", "value": 146524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "702c4da9-e4c8-432c-974e-4a3b1ff15eb9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a843957e-0ef9-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744951085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "b6097e02-78e3-42ce-b832-2ab69883ec03", "comment": "Malware payload (Mirai)", "value": "80d71a84f06c7cba118fdb7dcc087ab2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "d20ece84-6631-47f9-b38e-2ee7b33fedce", "comment": "Malware payload (Mirai)", "value": "29206f3b73af721c3c74bcbe47763b2177643697a375f6dc5f672eca1054d57a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "58178a22-da71-473f-adac-0b36c8b8754a", "value": "T102935EC5F743D4F1FC5301B11077AB365F32E0B9212ADA42C769BA32EC92952DA1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "32c2b9c5-af62-433c-af24-56779446415d", "value": "1536:bZxGp9fzWp6y0tjBSwuKXzWNc9ponbXU94uSfcRVb4:VE/fzt/9SnmU0p6bE+3ub", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744951085, "uuid": "4ce4d416-ad26-48c4-8155-10fca8e0c633", "value": 96388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951085, "uuid": "44964373-bc14-4428-a41d-9a6c469e261e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "769709e0-1c10-11f0-82df-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1744951748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951748, "uuid": "cf0b9e6f-2cb5-4808-b018-d3a585b0da2e", "comment": "Malware payload (RemcosRAT)", "value": "149814d0ecfe7f6176943587111fc17d", "object_relation": "md5", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951748, "uuid": "fb4cc4e1-072b-490c-9959-a6516d0560d6", "comment": "Malware payload (RemcosRAT)", "value": "6f3be1b43e2207ab428ab802d0a90bc027d00fc16dbc99b1650b642cc265f473", "object_relation": "sha256", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951748, "uuid": "5a70a092-a856-4c42-a22d-8ca4b02ae845", "value": "T174E4AEB55295AC9F0E1C0D61F5180B4A1C6C48E7F6B8D2F87E82B8F846961A44FFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951748, "uuid": "8308496c-b608-4e3e-9b4a-dfc1878f786b", "value": "12288:6+CBTMJYbtgg3O9sqRtAj48GJijk+8I3rQdk80OaCzB:6+Yxhgg3O9sqRtAU8mi733rQq8GCV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744951748, "uuid": "2d5bbefc-ce84-4708-9abf-cc70ca81fda8", "value": 664920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951748, "uuid": "6cd90fcf-4bd2-40a8-91d7-256e7f1ffd65", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15121162-1905-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744952644, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744952644, "uuid": "5ba10ba7-ab9e-40e2-916c-cbc8c542f7cb", "comment": "Malware payload", "value": "ffc17dc3993e79642746e725f538dab8", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744952644, "uuid": "583803f2-2a9a-4e13-8ef3-749a20ca98df", "comment": "Malware payload", "value": "85c57b6512b9483301828f4a50d36e4c707454bd912ead9f287fa0cd2a3e8cbc", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744952644, "uuid": "7e1fcff7-59db-445c-a657-5b8b0e1fe892", "value": "T14FE3124BEF369D1ACF402DB32ADF4B8D786A665E81DBB0A4E9D0814F13911CA7E121", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744952644, "uuid": "544af3bb-72e7-40db-9f43-11d35aa16fdd", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioKav:p3lOYoaja8xzx/0wsxzSi/av", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744952644, "uuid": "de7c0808-ff0a-4eba-9273-eba30b51335f", "value": 145024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744952644, "uuid": "5e043e5e-c39a-4341-9172-38be9ea7d1e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8093d39f-08ce-11f0-bf95-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1744952649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744952649, "uuid": "8c32fb87-ad06-49ec-9ac9-68b68084a24c", "comment": "Malware payload (AgentTesla)", "value": "8b16f5e7d14b086232d261a8f20603ac", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744952649, "uuid": "7bcdefb3-794a-4208-a0ed-e80a29d32faa", "comment": "Malware payload (AgentTesla)", "value": "d88d4d078d9391b6120bf418d60a090ad9fac3fbb3d1599b186cccbfa5b6cdb2", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744952649, "uuid": "68546cd0-40c2-4f57-96f5-df4fb17bba3a", "value": "T1816486FA6036ED8A86370E40E1043F179C299EDF66B847F8778815D1C19C68CADE75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744952649, "uuid": "f57c9de5-860c-4b50-a994-41a1e413efcd", "value": "3072:S6EBJYmm2hpc0woGSkHGzv+rvTM7VH9nM8BStoYyOsofdyfdAGpxk+dbDn3vDDOg:Unm27Nb+rIVd7GJfdyfd76IeF3l9CB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744952649, "uuid": "6748cbda-be8f-4349-9f8a-4703530ea23c", "value": 320172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744952649, "uuid": "76041bcb-b458-48f5-a736-93b1928701c2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5598d95-1c12-11f0-82df-82aee05be84a", "comment": "Malware payload (XWorm)", "timestamp": 1744952712, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744952712, "uuid": "86015426-8836-445d-b03a-4f406fcfa783", "comment": "Malware payload (XWorm)", "value": "66159ba1f7a9954ee2e3f19c46c82520", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744952712, "uuid": "2161337e-39c7-45e5-9ea4-f54dbe40b067", "comment": "Malware payload (XWorm)", "value": "432a34cd002a31b04e333172dc6923edb797be49bd0d9ca0d64fff0279e46f32", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744952712, "uuid": "3fbed74c-7a03-4cf8-b2ca-1ab86ff16c62", "value": "T1BFA5D03D4E06EB39856BF74EAC041D6D8D7A148BC2140766FCAAF163318BE5176BC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744952712, "uuid": "5187373a-5e51-4983-9a6f-a293e5e9e4f7", "value": "24576:xT1pfZwu9F8Do4oUnILB3FHRmtVwxzeuUPYHPgn+V0sXCBTNJhHfWM7JAiZBPD:t1pxlKo4oKGpFxEarHXMpr/h5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744952712, "uuid": "e28b3d2c-41d2-430f-8ec2-793105314378", "value": 2175660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744952712, "uuid": "46a5c212-2eb1-49b8-96bf-687822b2a6ff", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09d2dd22-1be2-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744953365, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953365, "uuid": "fe72fa8f-ed3a-40ec-a87d-67ec6c8404d1", "comment": "Malware payload", "value": "12bfa1c487da88d514fc0eb4799f185d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953365, "uuid": "7a7a907a-dea4-47d6-b2b3-ee4b1324ce70", "comment": "Malware payload", "value": "982adc094e57ac31ad6cde5b5ffd2413bae56296a6c6b28c328931ba63803609", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953365, "uuid": "0e9380f5-8f8f-44c7-923b-f78e121efa9a", "value": "T14D11C0412901595142EEC4AD17CF200E758694AF76087F1063FF3A6A2B52995B3E82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953365, "uuid": "fcfe3c1f-7337-482a-addf-658e0ff8b8d8", "value": "12:AGC9gfcy5QhyQhTxfQhRmKkOy52TEtx74lw4MzJhFZ3p4cVjDUZ9D0:AGWLy5QhyQh9QhNkOexGGhzbXUY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744953365, "uuid": "2f432a1b-96ad-4ae7-83de-76d6250b2a91", "value": 875, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953365, "uuid": "200d3801-975e-429a-baf7-3988a231ff77", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b13f76c-1c14-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744953366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "3ffe0a30-f235-4774-bc02-612b1d6fe2a0", "comment": "Malware payload (Gafgyt)", "value": "119171a6db7bd03ecfbd87dfb140a033", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "37263921-13c4-4b14-b969-54c8098dc60f", "comment": "Malware payload (Gafgyt)", "value": "4c506ea7a55a38e2a7531ed3c5f5bcd2505c5621a9af5a6f28ff6ffd2f3e7095", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "b38544f9-383c-4cc2-bf45-fd99335fcefa", "value": "T19C833B47E9A19FB7C0866A7565AB5E300B13E9912B4F1A4A303CA7F8434F4CD790EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "b0f51550-6eb5-4281-a23d-bcc3edad0bb3", "value": "1536:ClN9YyOXmMSr4k9dgGwKGg0CfjGJCRdojMyTRLmkxVqOEeofzee:g7OXmMSr4krG3J6BQLmkxVqODofzee", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744953366, "uuid": "501922af-d06c-402d-9da4-63a566d28bc3", "value": 88733, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "049d640f-4cdc-4893-897e-053152978d8d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b2de0c7-1c14-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744953366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "f0376a4f-765e-4bfb-9002-07597254635b", "comment": "Malware payload (Mirai)", "value": "ace0cc13cf92c8f799f43aff5b152e90", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "e3b8c1e3-a6b3-4a8c-b734-15a5f753315c", "comment": "Malware payload (Mirai)", "value": "3338edcbefcf15b410cc5792c7a60ed30cdb2b458268a54d0514e5f0509f1c5f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "c38c58b7-2260-4663-863b-800b12c398dd", "value": "T1B4935D27B552C6BBC08752B42BDFEA615833B4BC0B32720B33D47DA52B259D91E6DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "b15be90e-dccf-4015-8948-83a4990fbbf0", "value": "1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3byPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKLifUm/KWOXFE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744953366, "uuid": "d91fa10a-378c-45bd-8d0d-93df6dab161b", "value": 94679, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "37b70806-5007-4573-8eaa-c0ff7d19ee78", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b31e094-1c14-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744953366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "8c92d211-f380-4924-89f5-0496400e26eb", "comment": "Malware payload (Gafgyt)", "value": "c4ecec8805f1ac64d913975b2bf8dda0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "5b1c0203-5fab-4b34-b3f5-5e5c6544ba62", "comment": "Malware payload (Gafgyt)", "value": "e4f787cd291bea10e71c5337ae2ae4a783405bc47ec86d497d60c1891b43b050", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "accbaec7-bf6c-4790-a061-75f318414a99", "value": "T19B833C02E743C6B3CC830BB2029BAE665931BDAA1E269F49F31D7DF45B128C47116F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "59107357-1894-4823-86a4-87e6b2dd1e5f", "value": "1536:W35b9Vc4N3J6lreu5r4hWj8LAWDloRmF+wVOz+sXcfW7k:Ab9Vc4JJ6liuq0Ys2oRmEwVOz+ucfW7k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744953366, "uuid": "b8839306-b64a-4988-9617-adc89216923e", "value": 84999, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "ebba2a90-0fdd-4c26-a908-6824bfabcfa1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b33627c-1c14-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744953366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "14722d28-96bb-4871-8b6e-cb138b9bad5b", "comment": "Malware payload (Gafgyt)", "value": "309340fffdf2b65b73ae79789c97512a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "5074d1f8-f1ab-41f0-ab41-884d7bc4a8f1", "comment": "Malware payload (Gafgyt)", "value": "83dc33d07ecc1a604393fd15a7cc9b41cffe6b0d92c462c422364a941a4c9f26", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "8d9d34b5-06c4-4164-88a9-e4922c290954", "value": "T1ACB31845F8408727C2D327BAE78F479D3B36579467DB33116A38BEB42BC17892E295", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "d419866e-0f7e-40e1-9adf-7df49df2db8e", "value": "3072:MSY+46m1qOzssWFPPKNy+AmkZrQAhPDCXFke:06mgOzJWFPzmkZrQAhPDCXFke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744953366, "uuid": "563e0b02-2753-41f5-a536-5d0c98947df0", "value": 108417, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "0836e138-c9b9-4d25-ae93-74200974f511", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b39c5bc-1c14-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744953366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "e661e219-0900-451d-9d89-93a2a335cf9c", "comment": "Malware payload (Mirai)", "value": "8c27751e803eb4a05feef96f50f3f929", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "5bfd773e-4628-4ada-ad95-9b7e5ab54849", "comment": "Malware payload (Mirai)", "value": "ada6ca15ea782a6a56744eaa518a2e04620fe2a912de72cef84bcb6810538ce5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "b5372fce-04d5-43dc-8281-57986997651d", "value": "T155833A02F751C6B3D18316B612DB9F110532F9BF1A1AAE06F3AC3CF8AA154847563F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "8746a5fe-9e95-4672-9d72-cb19f12d1998", "value": "1536:vrYoW7as3D972+c6tsTngPE56XxCSn9PPvjtg0md+wVOz+sXcfW7k:vrYnvT97hc6G7gzXxxZ1mMwVOz+ucfWQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744953366, "uuid": "d100c21e-c811-4b21-9b29-a625c7eff459", "value": 81479, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "83a01b48-86f6-4048-aef0-57e08c818477", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b3ceb40-1c14-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744953366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "c43a6fc7-26d4-4851-86f3-eb65584793d7", "comment": "Malware payload (Gafgyt)", "value": "019b174957e4187603da006576d3f031", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "18880cdb-2e13-499b-a614-e4fc44621521", "comment": "Malware payload (Gafgyt)", "value": "de0a1d7385d7ca6fa97cf0a5034876c5f09e9d1dec5b13d70962993366d69161", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "ff77c395-2cf1-4307-ad68-c6d2236cb9d9", "value": "T19B933A47B71C0B53C59B5AF12DAB3BF08B69B9E113D76185A10AEFD00372EB12412F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "c505536c-bac9-471c-87d8-7a7573274517", "value": "1536:QQK1n7bzX9jajzvxRq57wBRcGCMCZDxeBk+8hl4umXxVqDrstKfz9e:Q97vk51RcG7AXl4umXxVqDrIKfz9e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744953366, "uuid": "73b08697-f7e7-4749-9e00-651337f1f0cd", "value": 93907, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "9295a509-497e-46df-aa58-bc6d6b2cb44f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b42dfbf-1c14-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744953366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "25ddff69-065d-4090-a114-9167af46a465", "comment": "Malware payload (Gafgyt)", "value": "c2595d4a4dc3a7ec63724e8702f3a4ad", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "e64d79d5-28df-4ad6-a299-df5fae3f86ee", "comment": "Malware payload (Gafgyt)", "value": "d04bc9070ab39655122f65dc0ced8f3c8df9560bf9c6032ca792543f5149d75d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "596169eb-9a29-449b-8d42-525e3f5f05aa", "value": "T148C32805D5508767C2D3237AE79F825D37325BA4A3DB33215A34BFB82BC27891E399", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "7f9ffa0d-b16c-48b2-8b01-43f7a0e44dab", "value": "3072:ekYPUfsgnsb0J2ag/VfmkDN0dn+mTQOY5NX3cn:9YPUfsgEo2a0mkDy+mTQOY5R3cn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744953366, "uuid": "3329621f-bfc7-44f5-a111-c33e92e14507", "value": 121007, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "25bbb7c6-3deb-4cd3-92df-e102dafecf99", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b47fa93-1c14-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744953366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "a37fbf3d-8ea2-47cb-aaff-131a2f8acf9b", "comment": "Malware payload (Gafgyt)", "value": "07384727d3f1c7dda9dd866164ead27f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "f86a7462-9727-4dc0-ba74-de5f26fc2ebd", "comment": "Malware payload (Gafgyt)", "value": "a3fb41e37e0f603b107865df021f52f127518560d79c763c02914c8dab41ab2c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "45235511-fb58-4299-83fb-ca5827652063", "value": "T139A3F896F800EF77F40AE67604D34B24B670BBE14E532622731739A6AE762D53823F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "bd27d2e3-b41c-4dbb-afa3-aaf66b08bfec", "value": "3072:Vgdr2vIBAxMyAOLRcftkhOemuxVqDr78fz1e:Vgdr2vIRyAYc+hOemuxVqDr78fz1e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744953366, "uuid": "623e59d8-c9e4-414f-84ca-c379c8df2513", "value": 98919, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "6fb79495-23cc-47dd-bda7-f9833b21f04f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b494b55-1c14-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744953366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "a08af1ce-5778-4985-a8b2-07d79097c07e", "comment": "Malware payload (Mirai)", "value": "8729634426580a89f0845ae5db095a88", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "d475b844-fb17-4398-a4bd-5a83065c7f0b", "comment": "Malware payload (Mirai)", "value": "3c21c818648ea61fb8374b8eb5eb01c9816a36cdcddba50a7b307f772dd3b81b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "1df26a7f-1498-46cc-8570-0a6989126d86", "value": "T156C39517BB618FB7D81FDE33059A8902108DE58A12D96F6BB2B4C92CE74B94F08D3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "6d8e3cfc-b9c1-467f-944c-a4d067a4b14c", "value": "1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8Ep7+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8EB+Dw8rmW+IFB1Dt1hR/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744953366, "uuid": "c926c901-513a-4b23-9ddb-5297f4843ca1", "value": 126042, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "e06f15b0-19ac-45c2-b8ef-a8d6cd3fbb68", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b508380-1c14-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744953366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "5d970c95-72ba-4094-88b2-ac453ec3c75a", "comment": "Malware payload (Gafgyt)", "value": "65f87e91fd449e6d5d463dc30a734723", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "f0bb3e11-7e68-4b4c-92d6-20dddcbd7d87", "comment": "Malware payload (Gafgyt)", "value": "b34fd0ccf969671e08ae688d01c08efc20875ac164c60e4760b7e152f23a8577", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "e2d57208-45a9-4da7-8cb7-6638d262b066", "value": "T159A31A44F841872BC3D327BBE78E479D3B36569467DB33116A386EB42BC17C92E295", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "1591f440-9f89-43a9-aee9-bb719f720d33", "value": "3072:VSx+i6mqaObhNvnPNKV+qKmZuqQ4DPwXXtse:y6mRObnvnP7qKmZuqQ4DPwXXtse", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744953366, "uuid": "b93adc6c-6712-45d3-bd8d-cf548ce72c99", "value": 100871, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "a3de0124-03b2-4e67-aa79-57c87ac06c19", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b57fb0c-1c14-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744953366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "8ca78eb7-ce8a-4314-bd07-6bbbab17bb0d", "comment": "Malware payload (Gafgyt)", "value": "d94216153a781144376b0335238e263d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "b6acf2f8-3733-4062-8efb-1a94c7359034", "comment": "Malware payload (Gafgyt)", "value": "831392f4c81e91b39158e3cfc94e8a2a8d905ed165367fdd74df951d5a00d5a9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "926bac8e-c7b2-4f99-8dae-74b02a056ce2", "value": "T195A3092B7B230F63C0CA117111E31732AAB5D79934F95397B9E06DAC2F16AC43816B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "d7e38646-cec1-4c39-9729-9b21a9aeae6e", "value": "1536:4UYKNj4+N2buktZqC5vtPGkvmcmXxFq/Pse8feW0e:E0N2bukSSJGomcmXxFq/P78f30e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744953366, "uuid": "1563a2ea-82b8-466a-9a12-6f504d97d903", "value": 107123, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "82bc6623-d1e6-4304-b558-4472d5962268", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b600ce1-1c14-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744953366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "502bf3d9-caac-4121-9c66-43d7e3a6a58d", "comment": "Malware payload (Mirai)", "value": "81960e96b92323ff26d95f323b87359b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "4e170cf9-1af1-48e5-a5c2-6e59db59548b", "comment": "Malware payload (Mirai)", "value": "b00d09996d796653e0d712caad6bc9ba63a0f1735e28430ce47eb1f2885be03c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "4b5dae48-9fd8-4cf0-b3cd-1a8fc7904cc0", "value": "T199C3842E7E12BFBEE668863107F35F70879521D227A19382F26CD6181E7128D1C5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "524fbcbf-cd66-4382-8f80-77ee4b26f8d9", "value": "1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBe2EdWfRZrmW+IFj:Ted0W0MZQHwd6RZrmW+IFB1Dt1hR/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744953366, "uuid": "0f615726-082b-4367-a6c7-e756e8b13fca", "value": 125962, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953366, "uuid": "e858f4fe-e0f8-4e84-a5fd-fc9a69b04ba6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e180134e-1c18-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744955363, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744955363, "uuid": "189a295b-41d1-4ad4-9375-6426d1db6fde", "comment": "Malware payload", "value": "620ff9c64a7ba069ca0a4d0cfcb8c05c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744955363, "uuid": "c5e7bc52-ae75-4bee-99d7-214c60b88c7a", "comment": "Malware payload", "value": "0c518f054783c90b38cd7df736045a1de4609bca4c329ef51e8cca975e229c57", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744955363, "uuid": "31fae29d-77ea-48ad-b54c-16a83710e46f", "value": "T12024DF6C422CE19198714CCC6689BB5BA538AB7BDBDC20E9D552D08E39C02FFD5148", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744955363, "uuid": "0c73821c-9d76-4834-b80f-2d4ca0a1159a", "value": "6144:asjAG08sFtQhbzYSobXP/Bmrtq9ynfPt5iq:MGjQQFs//BsIMfPt5iq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744955363, "uuid": "755fa1cc-5a29-49af-bf27-f7e4b1108b1a", "value": 211026, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744955363, "uuid": "4eb610a4-2c08-414c-b17e-c5cc613c2670", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64267d6e-ee5e-11ef-b8ac-82aee05be84a", "comment": "Malware payload", "timestamp": 1744955825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744955825, "uuid": "cbdbb890-772f-4f97-8528-1fac59f38ef5", "comment": "Malware payload", "value": "1b163b7d3b7460aa285b11f07d59cf26", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744955825, "uuid": "fd8b43d1-8e47-4df0-8533-6074a8372b26", "comment": "Malware payload", "value": "5be24ce88e70b069ed4df3a7e1be38bf2ae1ea23f1c846174143fc341a134b0d", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744955825, "uuid": "9b938872-4e4f-4915-ac3b-77ef8306aac8", "value": "T1C564089ABC919A56D5D413BBBA6E85CE330323B8D2DF7103CD045F1876CA94F0E7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744955825, "uuid": "e31bd50f-1833-4d46-9b8f-ab1368703d59", "value": "3072:T2s/ITo7WCkybotgsJ913DhrbW4UYSx7Q:T2s/gAWuboqsJ9xcJxs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744955825, "uuid": "5a549027-e0dd-4474-8b95-09f76e665349", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744955825, "uuid": "763004fb-b11c-404e-80cd-5c3595454afc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76e2a149-1c21-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1744959050, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959050, "uuid": "ffac4734-2ead-4ddc-a59e-5c467157e09d", "comment": "Malware payload (CredentialFlusher)", "value": "3bfd788b4de79d84736d8667540ac572", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959050, "uuid": "2fe42a80-fad4-455b-9fd9-a848a43de9c5", "comment": "Malware payload (CredentialFlusher)", "value": "d63ec7ee010f48dd1618c03d438c1f46e2b34e59813fc9e89d5c5ae9d10b5ad4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959050, "uuid": "fef7dae5-13bc-46c7-8057-fa82928499d5", "value": "T15D259E027381D062FFAB92334F5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959050, "uuid": "9d704c0f-737c-4884-bb84-615ea2cd2c05", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959050, "uuid": "8d75c623-505b-47ff-b7a3-c77484ac034b", "value": "24576:vqDEvCTbMWu7rQYlBQcBiT6rprG8aY3Ad:vTvC/MTQYxsWR7aY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744959050, "uuid": "65e8ff4b-2150-42df-8213-d0cc374992d2", "value": 967680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959050, "uuid": "71f9279a-7453-4293-aa9a-51f7a6ddcf85", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6addf2f7-1c22-11f0-82df-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1744959459, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959459, "uuid": "9a2ab39e-8a6b-477c-8b59-202726deb4f0", "comment": "Malware payload (Stealc)", "value": "0b2ebca8bff1e5cd9e43cfabc020a8c5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959459, "uuid": "e71efd2d-04b8-477d-bf85-0811c34e96f6", "comment": "Malware payload (Stealc)", "value": "04ff626ceab63a9ebabda3df54dff36e36c44585df115f5b43e5802367689e49", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959459, "uuid": "6604d8b7-9845-4017-8be6-5eef82c8c4f8", "value": "T18DB53347FB7219B4E68FA1718A51AB5533FE6761C6B4809133395C38DE0305FA70EA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959459, "uuid": "a6559fc6-882f-4bee-8b37-f166c6a42725", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959459, "uuid": "15c5c599-e88e-49f8-9288-9e0672050331", "value": "49152:PQmG4cn3UY/iWDO9fEaBlWwqP2/dyK3dBmyN1HKbl:4qc3UY/iGO9fEaTRE2Fx3dBmy3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744959459, "uuid": "829007bc-9d6f-4f76-b4e6-635129d9159f", "value": 2486784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959459, "uuid": "fd305990-0102-4308-aed5-04156e702177", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73a33c9f-1c22-11f0-82df-82aee05be84a", "comment": "Malware payload (Neshta)", "timestamp": 1744959474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959474, "uuid": "43813882-b5c4-44ad-84fe-8d37ccdce2f3", "comment": "Malware payload (Neshta)", "value": "dcb8f7688779dc8c5365e604486c39fb", "object_relation": "md5", "Tag": [ { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Neshta", "colour": "#8e9cff", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959474, "uuid": "149e2355-5dcf-4d01-a002-0b7fa8959804", "comment": "Malware payload (Neshta)", "value": "d637f522698c600b3d30f2df22ebfdd377ed47912b57840662bcb39e9ff4e73c", "object_relation": "sha256", "Tag": [ { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Neshta", "colour": "#8e9cff", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959474, "uuid": "f6c1ea3c-61c6-461c-abb9-efa0bb209a71", "value": "T1F525E14C63E48A60F8BE1AB98431518843B0F447DAB7E75C0FD0A5FA5E72792DC097", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959474, "uuid": "00e6bab1-7dd8-4005-8c4a-c52d59c205e9", "value": "9f4693fc0c511135129493f2161d1e86", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959474, "uuid": "73059cc4-9995-400f-b7fa-471c6a747010", "value": "12288:d1nr+p2cPCXf/keoqQJndVBBlbKG+r/u/E0eM6nNe75FP:dVDcqXfceoqQJkVa/6Xe75FP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744959474, "uuid": "3b0c459a-b47b-44b7-ad90-b8386f6274b5", "value": 968704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959474, "uuid": "3ad2e6a7-7447-40b8-a45a-6a3999b1adf3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6de7187-1c22-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744959667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959667, "uuid": "d0bc8bff-4996-4efd-995f-5c55a2a83666", "comment": "Malware payload", "value": "4c753f7a2af14b8dc43f2d169ea61752", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959667, "uuid": "45da9092-f544-478c-872d-bbea0e6cb7ed", "comment": "Malware payload", "value": "a951bb26b99601f732f9333d11dfa5028e78d90ef80287dc7e82a2c37de61993", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959667, "uuid": "8af06131-a1a9-4ed0-a371-85b0fddb4718", "value": "T1C9336D41778C8E92DBDE9ABE64B160624B70E266B833F3566CCC69B914773C40A413", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959667, "uuid": "21bc8f4f-dbc8-4686-905d-f481634ed0be", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959667, "uuid": "76067b21-2f52-47f8-90c3-ba2fc9fd9d23", "value": "768:xD6soqh8jKdYjwlcpFeY3xqMu8zlcKgADF0b7tPjNmgTFsg3AsXxvz:ZpoqyjKdCT/xqMu8zljJZ0ntwmfvvz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744959667, "uuid": "652d880e-8733-4560-a34b-5781600c4a44", "value": 51632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959667, "uuid": "fa37d62a-3b21-41b4-b50c-906ad0ce61af", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04468569-1c23-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744959716, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959716, "uuid": "dda55ab8-5911-42c0-92d6-b3660d137848", "comment": "Malware payload", "value": "a16230eff44552253fb782739b33b144", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959716, "uuid": "4d3f5c81-6eac-46a5-9a35-e5fca2120693", "comment": "Malware payload", "value": "88ee883000b477d9061d827483bed1f2bcc43714defa2fd22d2c0d4df1cb9afa", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959716, "uuid": "40d4a9ce-53b2-4f85-b15c-9161a8592e3c", "value": "T17724E02BC329D5AD33142E3F7DE23502C85F26ACF735D42B016EB17A05712A9876AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959716, "uuid": "e77867a0-9aef-4c30-990b-b516fb682607", "value": "6144:+EcBzHsJ2qGy6rs1UyfMuUGPnGmHq9jVV:+1BzMoKUFr2nGmHq1VV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744959716, "uuid": "8b275aa4-eb10-4c37-b910-39765571cdc3", "value": 223310, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959716, "uuid": "8d41bd64-8b43-4f6d-ba12-e415c22908cb", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95451d2c-1c23-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744959960, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959960, "uuid": "d952f20d-d7a7-424c-b8f9-6affeaf52411", "comment": "Malware payload", "value": "c01d4e0bd7a03c273268f22e43d57b25", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959960, "uuid": "6d5598e4-781f-4cfc-9594-27f19d392502", "comment": "Malware payload", "value": "92ec4f4dee1084b06f39161ed07005f518b08155d757fa8828d5aa6d810c37e2", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959960, "uuid": "735a18f1-c672-42f9-b8c6-197ff3758397", "value": "T14B9533F66D57388AC226DC32DFD75B81DE30218A488FC3390C3BD23496633595797A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959960, "uuid": "2968e0a9-c0ba-4f3e-8d77-904c3051d98c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959960, "uuid": "e1ce435e-439a-469f-8747-06686e591810", "value": "49152:410h6s2Efxs8DHUavFZit1SUxlVWR7kt:b2CHUafiWUgy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744959960, "uuid": "7fafd8ee-06b0-44d1-8525-f66a1d111de4", "value": 1887744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959960, "uuid": "340d7330-bb6f-4b1a-96ce-c56ca6a02807", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1744959964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959964, "uuid": "0f2fead9-61fa-460d-a7b1-4537e6cd889f", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959964, "uuid": "7d7eee6d-00c7-48c7-8f9d-6114d05029af", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959964, "uuid": "af0bc607-4814-4e71-a7b8-0ffda4a9c1ad", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959964, "uuid": "dd8da71e-aa81-48b3-a16c-d23efc41a80f", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744959964, "uuid": "ae49f49c-5072-4d1f-a85a-7cff9053bfbe", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5d70a3a-1c23-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744960041, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960041, "uuid": "722aa3b4-bb94-447b-a3cb-b161a62626f4", "comment": "Malware payload", "value": "135a383816a6fbd2735d9d46e6291b19", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960041, "uuid": "937de28b-bcde-4390-b102-62335a1a1a14", "comment": "Malware payload", "value": "eb1fefff88836168a327f4300fe98ffd651f91aee04d7e7a69f26dc1aca30204", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960041, "uuid": "aac70602-7a62-48cc-9ddb-d06f18053269", "value": "T1A91523C6D8940A49F4240F7580B2ACF84A3FEF957C75594ACCADBC6629736C62D1AC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960041, "uuid": "ab1ea79b-48dd-4b46-9399-271be651195e", "value": "4db47062180d52dd06f8c279cad4c4b4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960041, "uuid": "67827946-41fb-4333-845e-f83559381d4b", "value": "12288:kXb1RzGKOLjwYLZJ1dt0auNNKYeaKUex4foO2skotZ3cDKBSsNIGcCOR0sfW/qTr:c1FY0Yp32KUex4fodCXTB0n/SSQ1GAU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744960041, "uuid": "2eec9c8e-0972-4027-abbb-e0de39d9c978", "value": 947200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960041, "uuid": "8907a4a1-82f9-47f8-9424-d047ee420e25", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db42448d-1c23-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744960077, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960077, "uuid": "cd2d9227-4b9d-46ec-88b9-f36bb4581d8f", "comment": "Malware payload", "value": "a6cfeccd306e88918531f272ec776b3a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960077, "uuid": "3becae08-4fee-4243-881b-656c0dfa2d98", "comment": "Malware payload", "value": "43f3b559f8fa674ba1541d156fb5cfeef5d57516d0eba92b147fc5a9fc0c0b26", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960077, "uuid": "10f39261-9517-455b-a956-34bf7f884c87", "value": "T1C034DFAB634CA919F81359BB88B0919E1EED82010DD060997F8FC7647153F48EF1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960077, "uuid": "6d6a51fd-70ef-40fb-8994-a10089dabcfd", "value": "6144:f4+kPBzMptEt2Ot6VHRCIUxU/X7BEEdkmzH:fGzMY2OoVHRCIUxUd1ku", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744960077, "uuid": "68843560-a670-4945-b4d6-1eb04646c902", "value": 247870, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960077, "uuid": "6374c29e-0cf3-4e1d-a350-369dfc2de8b5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db196485-1c24-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744960506, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960506, "uuid": "ff056e94-21da-4e83-b8d1-da1545c00464", "comment": "Malware payload (Mirai)", "value": "b00c2b4f32f73e116edc1d8f8b483e70", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960506, "uuid": "216ddaa4-0a51-4f9e-923d-f1f8bc8c8c8a", "comment": "Malware payload (Mirai)", "value": "4f5e2a753e8ec411d13f359b7f172d28a0e25a124509f116a28ae9db4935093d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960506, "uuid": "9989c283-ca83-4023-a5bb-f2f930a8a56b", "value": "T1BFD2E0DCF7A0B753C99CCCB9969C1FB81AA8E0D43306075883624DC6F0A625369CE3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960506, "uuid": "05a40091-4674-401a-9d04-9bf14f63c09f", "value": "384:w/FNvDbur7oTSly05yJYNOHtjR54PrdSbVQNC7BjVhafhpCOmhDNNEoaaURWGVCw:w/7DDMyxYrYbVQOEmh5aHWUp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744960506, "uuid": "641bfe58-8e08-4a41-938f-cb3d322ea507", "value": 31092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960506, "uuid": "9cfe17cd-ae2d-443c-95ea-02c815aecfb2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db1d3ca6-1c24-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744960506, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960506, "uuid": "445b0192-0ee6-4f23-be7e-72de5f4ca98c", "comment": "Malware payload (Mirai)", "value": "3430c5917796a62039ba1b864d63d9c8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960506, "uuid": "b9ac0481-ea9c-4965-8931-aa25fcd63419", "comment": "Malware payload (Mirai)", "value": "b2f0a86449efc8d8fff50ef0ab3ab7cc6cd09f3878c42d6c6cb828d54a498028", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960506, "uuid": "979de78a-3adf-4b1e-a2b3-9ed3f32ad4b1", "value": "T117C2E179E1501FD5EEF93FF26749D2C833B02BD973B39DB632408606DA06A6183505", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960506, "uuid": "e6d7144f-7532-4330-b381-262d0ee53063", "value": "768:Y1QHATS6SqEvzYyT0xW5vFi2wlbjvqakBB5pz4uVcqgw09hY:YdTSV7LSDNqakP5V4u+qgw096", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744960506, "uuid": "2b3e5024-7a25-4c31-b31d-effc6a7ca1be", "value": 27772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960506, "uuid": "45d16a0d-c25c-4b7a-b324-697436e840b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db93b5a3-1c24-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744960507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960507, "uuid": "a4ac0cc1-1504-483e-9859-814b1511c82a", "comment": "Malware payload (Mirai)", "value": "6f36f8d0f2cb02e4f7b422676c6c7923", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960507, "uuid": "c8a03673-aebc-4b52-ae94-a7c8d7f514a5", "comment": "Malware payload (Mirai)", "value": "cd09bc949c0e4e8856bc635d29937e4abc8d1e1ff1eb68354d7c0a3753b19569", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960507, "uuid": "4e5acdd6-4690-442e-bfe1-c869dbe54ed8", "value": "T15BB2F1A16148ED30DB72487EE53E8657129B13F883F3712032440E3975EA12A3BBA3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960507, "uuid": "e1720573-4837-473d-8800-29595b1551f7", "value": "384:2anGkYWduVJNDN05JoC6IT5fZpYq4as0G21L7R/iwCPsn9ubn6+NgKhymdGUop5f:2uGkYjVTpoJH6Nas03Bi3HNgKs3Uoz+u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744960507, "uuid": "9fe2ca74-ac51-43bf-9052-4e4535a96039", "value": 25256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960507, "uuid": "10550743-df4c-4489-8295-cb3b4f6b5997", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe83ea88-1c24-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744960566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960566, "uuid": "31b10b8d-2368-4f18-83bb-84e76eb76b54", "comment": "Malware payload (Mirai)", "value": "066b69c13d39612fca7423aea0c59b9a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960566, "uuid": "14feb1f0-ed9b-4c4d-9c87-4e09a9e75e31", "comment": "Malware payload (Mirai)", "value": "5e2ea739744f66ba824e0ed92a2b24a878f53b280ceb5fe8864babfded038363", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960566, "uuid": "7ec5ed72-3f93-4e88-b3e8-1022a51c9951", "value": "T11CD2E2E327ABE8B5C453793D005E1044F8D2A9155E63379B08CBF1BEE9A7951B7032", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960566, "uuid": "f130aa35-adce-4a63-9c38-24274e220d11", "value": "768:1NM8w9O3ubVN4Wv2fyvSXQPBquo2C8gUBzbx0FV:1NYN7myqgJjo9UBGV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744960566, "uuid": "3e334c81-88da-41ec-869f-234db2783c85", "value": 30084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960566, "uuid": "6966b8c6-0649-4f31-a2de-8030eb8ae659", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b584228-1c25-11f0-82df-82aee05be84a", "comment": "Malware payload (Neshta)", "timestamp": 1744960829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960829, "uuid": "646c70a6-6603-4056-b76b-990d58456e2c", "comment": "Malware payload (Neshta)", "value": "2f381a8ba74e95d5d644024ca041d2f0", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Neshta", "colour": "#8e9cff", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960829, "uuid": "441d9737-51ee-4f06-9373-6729eb8e5232", "comment": "Malware payload (Neshta)", "value": "3ca492425fa51cc20f7f68abb32df831ca66234c89fd70175a3ce58b8128c510", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Neshta", "colour": "#8e9cff", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960829, "uuid": "5e159593-c10f-483b-a711-74aa2d0cec9e", "value": "T1CC15CE8877E54930E5BE5E78893546481735FA0B8EB7EB2D0E95A0FE1D337819C243", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960829, "uuid": "2548c6f4-780e-413e-be60-a5cacbf23a03", "value": "9f4693fc0c511135129493f2161d1e86", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960829, "uuid": "569f1b23-c6bd-49d5-9e3e-9b540ba7a71d", "value": "12288:dl8SwYmvIb18ZRlhdIu/bQHg0hQBBlbKG+r/u/E0QM6nNezle:ifZRlhl/UVdVa/cXezE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744960829, "uuid": "4b695ffc-deed-45f0-9359-1ac1560f4199", "value": 896000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960829, "uuid": "4f909a6f-d05f-4f3a-8c34-ffc5a4f65cd8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc3a2b30-1c25-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744960938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960938, "uuid": "56beaaee-e767-4f3b-9b45-a34f87b5bedc", "comment": "Malware payload", "value": "4c8685cb301a37e3ee736791aa3fa877", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960938, "uuid": "607c71bb-da8b-4a20-8053-088c6c5c99e8", "comment": "Malware payload", "value": "6a7b40fad9d347f52877cd068ab1a731863fdbdef577fa33d31d61390f44db61", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960938, "uuid": "11f0afb8-1930-49e0-8514-d804edca93fe", "value": "T1E434F1CE66973D9042E5E8B36B00D69E81F10F4B212D1CA9F41CFF8867E4D95B2E17", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960938, "uuid": "b234087e-7761-47eb-abdb-a8fea780033d", "value": "6144:LxmfNN1BA0wlrEGzeIf8bCUQRq20+9N1w7N+Vn8:1mlW0efqIf82UJl+9N1w7N+Vn8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744960938, "uuid": "99d78177-3f7d-4506-9961-8195b81b444b", "value": 247873, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960938, "uuid": "57f45d33-1b38-49ed-9bce-13300db4eedf", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d8b120c-13a3-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744961466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744961466, "uuid": "bf7b82fa-43b8-432e-b01e-7c1ff6f61dfd", "comment": "Malware payload (Mirai)", "value": "7d4a3f6a4a6fff8e3c562144b9e9266a", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744961466, "uuid": "3aecdcd2-7a9b-4d3e-9b67-246666a832aa", "comment": "Malware payload (Mirai)", "value": "9b8dd1882387ddc6dc7bf7354c8225c0ce9d52582e9f302d47a44f5bbbf56a38", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744961466, "uuid": "a8815c3a-a682-4519-8fae-ea23b3b615e7", "value": "T106F2F11DA7636950CDA10072E246CF3936121E140B99FAB80B564F878AFC5823F5AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744961466, "uuid": "597f55bb-72b3-4e08-96b3-a4a043757dee", "value": "768:xbQkhcZ7r0HfLRTj4XLo/RdMKVrLje2K8wpyWOGx0IB/F0J9VAHFyI2:ZQkhcGjP/RdMK1PnQ0q236ly7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744961466, "uuid": "2ec98032-3c0f-4d54-9107-40e9eb7447ff", "value": 36636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744961466, "uuid": "6c532040-e507-4dbc-93b9-5ad5bcf67333", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1967a1b1-1c2a-11f0-82df-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1744962758, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744962758, "uuid": "ff87363a-20e9-4a20-a4a8-b35e12b0494f", "comment": "Malware payload (Stealc)", "value": "9e8f3cb26f25c3e799f0b90fe78d8422", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744962758, "uuid": "302c5562-9927-40c0-81cd-6921440990bb", "comment": "Malware payload (Stealc)", "value": "bd934a2faea290adb6062c096144b374b18ce62f684b2a81f924c2511a286db3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744962758, "uuid": "5cee7a86-1794-484d-ac5b-6bba0b751962", "value": "T164C5330BFAA10EAAE61D01B5579A762D3F07F4060BD444DE130B7A7A23BB22F9315D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744962758, "uuid": "c8698655-7a44-4811-900e-9706db9c8c99", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744962758, "uuid": "a12044b1-cb28-4331-a112-0508d02ee880", "value": "49152:ewL5HBG654XebSeo55ytQPJqVDKE2olZPYN9P4IZ8Rhev06AeScxnNxxx:eUduebSdPSh2orYZYevbScxj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744962758, "uuid": "3414ff47-0a65-4fd7-8f16-888a80c35ace", "value": 2519552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744962758, "uuid": "fc85a592-09b2-47f2-a906-1392a5fddd14", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae56364f-1c2e-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744964726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744964726, "uuid": "b9bf6d33-f4f5-49a0-844e-2ac305ea716c", "comment": "Malware payload", "value": "d4ace619da19f74c1d0d8f326cdb2058", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744964726, "uuid": "4a503ad5-8a4c-45f6-ade8-162ae8e624ec", "comment": "Malware payload", "value": "a47fd19f263f6b0958fb82b0686f4c66d9d1cdc579992fc917b388be0e92838c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744964726, "uuid": "23711e0d-78ce-4f64-a58c-524557c10ee9", "value": "T19906121CE182BC33C977B2FD50BB5643D755A0E922DF6DA264CA95380B0B6143F362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744964726, "uuid": "71fc70c7-9272-4e07-bbe5-84ad0c2c9aa2", "value": "98304:OhE57rkbTvA/DFxjtORyDRRmJKY0MbKPHvwWo:XpeTY/xxjP/RY0MbKPzo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744964726, "uuid": "3e8deee9-e7e2-44e0-ad5e-f61a874aba4c", "value": 3992623, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744964726, "uuid": "be18a99a-954a-478d-9e99-d46e0036f41e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a737756a-1c30-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744965573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744965573, "uuid": "537131cc-8398-414d-8329-ced0c348f2fd", "comment": "Malware payload", "value": "0cfe9baec6031a5b0e6e467717fbe9e4", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744965573, "uuid": "03b361ed-a608-4bd7-8691-5a55c1af55ec", "comment": "Malware payload", "value": "8f43976f355a2ec5aa47a51777c403f792aba6b849d88dd4ee8bde8d606d80bc", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744965573, "uuid": "154d5181-b0b2-46c3-97c5-23c4e31c31d6", "value": "T1DE53E97766623E0D9233480CB8C5B6C87718C453D4075AEDE9BAA62CC3CBDC691727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744965573, "uuid": "c8831820-9aa7-4efb-8b89-fcbce5e0a895", "value": "768:aA1fho1SnvHgRNv+f5AfpUxnHeob4f1u0eJwO0H+UJF/dsvR1X1t1RB1p+dV2sAy:aA1fho1P6n2+vR1X1t1RB1p+dw1s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744965573, "uuid": "02a0b933-1dc3-4555-93b4-71df00c28e31", "value": 64434, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744965573, "uuid": "a4e4f4b4-2856-4652-9f60-af70fc763ab9", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b867ec94-1c32-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1744966461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744966461, "uuid": "227bbc96-bb99-4f44-a714-977262d6a131", "comment": "Malware payload (Amadey)", "value": "8375869f35e4563a0e93b58363872645", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744966461, "uuid": "62270c1b-25b9-4170-8a17-9cf4cef3c28a", "comment": "Malware payload (Amadey)", "value": "003a4d3bda34ae9ceb63dc3135c6c42021fd749618a3240a1949a779e60e64c5", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744966461, "uuid": "4de492c8-8d62-478e-9d9e-c07af4fbf607", "value": "T167853325376A5B7CF09C42B85BCF792E36BCA43A70065CD52509448ADAC73C91FA78", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744966461, "uuid": "6195339e-bcc8-4101-8737-b9ce44f787ef", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744966461, "uuid": "366ef62a-28b0-45be-a609-4ff370b0331b", "value": "24576:bTdRCJkPVX/u9k69SLIJWkdQdNmSyM1kPPzeB9bte0Q6pUPWu30q1/rZcfk/C:bUIb690IERNbyMJB9c0QR+qVP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744966461, "uuid": "76d4b4e3-4af5-46ed-b9ab-3c00d54ad66e", "value": 1863680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744966461, "uuid": "d7e42e92-1adf-49e8-a2d5-2b84aa651882", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19d9d46e-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1744968806, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744968806, "uuid": "fd5eeace-1848-4954-b964-7e7b4300217b", "comment": "Malware payload", "value": "195e35ce0fad619aef8c8c638f981467", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744968806, "uuid": "60e33284-69c5-4cbd-b19d-60112363e181", "comment": "Malware payload", "value": "d5aadfcde4a266619be66a0b06d156f644e151283856630e6cd849adcb51e032", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744968806, "uuid": "5b3034ac-8239-40ad-8240-fc37a4aea9cf", "value": "A313028336953F73D1218CF4D7FCEFCAA14A7D94AFD9141BA8113A99B07135C28C982A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744968806, "uuid": "2637d579-1502-4d91-b66e-3d6e09177ac2", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEK:yYI0ARqw1qAEW67UIWi7M8gmJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744968806, "uuid": "a8d3a323-bed0-4c77-b139-29d99f3e4704", "value": 43440, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f59a5dd-1c3a-11f0-82df-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1744969855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744969855, "uuid": "1b9c2969-a621-43c8-9b8b-31ab70b28791", "comment": "Malware payload (Stealc)", "value": "9b303639e6f9e418ef65ab334b49f2ea", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744969855, "uuid": "d6290bec-4d14-475a-b810-9ec2032844e2", "comment": "Malware payload (Stealc)", "value": "7b8589220b16fb95ca14bcd5461c1be47895dfbfa495f0a990749f771b5fb932", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744969855, "uuid": "e3418ced-5027-4bb4-b17c-d758ab3d6cad", "value": "T140B5334BEC945F79DF1E91F80BBA5A7CBFA70A0046D0E3D16B818546B78AA0F43270", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744969855, "uuid": "6fa3e76f-b7a5-4075-9bc9-7fee09dceb14", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744969855, "uuid": "0b4e0b46-de81-47d0-89b2-5bfd08700f84", "value": "49152:tQm4JdcHViAcpGbiLLAzkqIbEsv1rhPnw1E1PohNSdf/0+y4W:WHbccGJkpbFvH1AhkdUu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744969855, "uuid": "c69b66ff-f76e-4550-a81a-961332e9a788", "value": 2463232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744969855, "uuid": "886c45a7-502e-4e1d-bb73-ec88b91e7ef5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "069970e8-1c3b-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1744970028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744970028, "uuid": "98db580d-fdc6-4c10-bedf-059c48880eb1", "comment": "Malware payload (CredentialFlusher)", "value": "048e03a43c5f3c8d8c94dc2d5177687f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744970028, "uuid": "94baba87-5b37-40f2-825e-891202143ba4", "comment": "Malware payload (CredentialFlusher)", "value": "83d4f7e7f5ba8420059319c139d32b68cb2fab3ab7469523e1da5cb0ed8df2cf", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744970028, "uuid": "cd504b19-a3a9-43f5-95bf-07313bec01ec", "value": "T1CE259E0273D1C062FF9B92334B5AF6515BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744970028, "uuid": "2ce7a058-d8aa-43ea-abfb-cfba9215f6a2", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744970028, "uuid": "36e2c7a1-7909-47b9-bba9-9f1789093caf", "value": "24576:cqDEvCTbMWu7rQYlBQcBiT6rprG8aKbP:cTvC/MTQYxsWR7aKb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744970028, "uuid": "2bbd5b20-c581-43f1-b997-de2f8d906b52", "value": 973312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744970028, "uuid": "3287f297-dacb-43c6-89c0-a09fb20af1db", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74e48bf0-1c3b-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1744970213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744970213, "uuid": "794fa5ac-39ad-43ef-a9ac-7fb39782edb4", "comment": "Malware payload (Amadey)", "value": "0097d0536cc4bd53f46c2ca90221ad8e", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744970213, "uuid": "6b4e76d5-0a53-4768-90a3-cab2d3699c11", "comment": "Malware payload (Amadey)", "value": "f059a496d44421a0652880da2345e6e6dd0b3a930a9a41f0b3f708587de5804b", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744970213, "uuid": "625784d5-ffc4-4e6f-8899-e4cd07a9a6e5", "value": "T1CE9533A56F92B295C251B77809535519DB929C2ACE911D203FD0F72ECEE36C24FF00", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744970213, "uuid": "624b2022-c1b8-4c33-a497-ad15b48a0068", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744970213, "uuid": "23c942cb-49e5-4e99-a7d7-8804a28b90e1", "value": "49152:PfMahvFxJDG+DAjVYCIhnL1hUWFl3jJEeo76G7N5yQwp:PfMUdra+Exncpyyl3ueNCA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744970213, "uuid": "c617ba55-2053-422c-b67b-f2f368b707a5", "value": 1897472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744970213, "uuid": "4e626efe-926a-478d-b00a-bddd173aa0ef", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a209f173-1c3b-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744970289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744970289, "uuid": "a4e3c25a-041e-46a9-b32d-f13e8a9f2fe3", "comment": "Malware payload", "value": "fcfee52ca80bfbd4b601c426c3c3f268", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744970289, "uuid": "646a0d19-530c-4549-aeca-085d23651fc0", "comment": "Malware payload", "value": "9ba8272e5543354c0e882d77cc70253b77b01f979c2e5d70ed2993fcf52a8210", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744970289, "uuid": "34a26457-d11c-4e0c-a4a9-5a2aff142aec", "value": "T18EF12C926C5F1E408799B46B02EE6CECA41E8FE6D1850889F19C8DFD4FE264C52DC2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744970289, "uuid": "bec32436-4fb6-49c7-8602-23a9126b3b5e", "value": "96:Ot48Qoqycv5RZw9wYwz3wlBdBZswMPzvYkN8zzzhKTIVP3C0PnMiOAZUSU1UPU9m:Ot4Fycv1I1OEBdPsT7aKTEP3pX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744970289, "uuid": "d23784a8-332d-43a8-a2cf-19873fd1156e", "value": 7535, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744970289, "uuid": "e8ebbdd5-7f1b-43d3-8666-bd285be795aa", "value": "text/x-php", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5976eb5d-1c3d-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744971026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744971026, "uuid": "b0e5f7dd-f691-4d37-a119-3dd1f6579391", "comment": "Malware payload", "value": "8979c65605f81d9d16e0a7842e81f397", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744971026, "uuid": "dfecf17b-9688-4b30-b5d7-dc5887416593", "comment": "Malware payload", "value": "a22eb60bcea41e1f8c5456ecde21eecd299069ce7de639e0a7b11968112656ef", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744971026, "uuid": "b3e59166-1f8c-4510-a916-3c48d7312f6e", "value": "T16653E97766623E0D9233480CB8C5B6C87718C453D4075AEDE9BAA62CC3CBDC691727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744971026, "uuid": "3ba1ed67-3fbb-4eef-8d5f-f1181276977e", "value": "768:aA1fho1SnvHgRNv+f5AfpUxnHeob4f1u0eJwO0H+UJF/dsvR1X1t1RB1p+dB2sAy:aA1fho1P6n2+vR1X1t1RB1p+d01s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744971026, "uuid": "613b0785-202c-495e-a39b-1d05918bbbca", "value": 64434, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744971026, "uuid": "864dde84-cf7b-413a-bfda-4a07d5e00808", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f71bd59c-1c3d-11f0-82df-82aee05be84a", "comment": "Malware payload (Havoc)", "timestamp": 1744971291, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744971291, "uuid": "de2f65aa-4784-4868-b038-360466e75434", "comment": "Malware payload (Havoc)", "value": "5df9a8dd3068e9ff67e7816a20051763", "object_relation": "md5", "Tag": [ { "name": "Havoc", "colour": "#a1abbd", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744971291, "uuid": "7d7dfd4c-3730-4f71-8207-53c5cfccd74f", "comment": "Malware payload (Havoc)", "value": "a3764c666c932e8bc85df36c506fc41ff2e98cf05b3cca5ffa3be2e7b9bb7786", "object_relation": "sha256", "Tag": [ { "name": "Havoc", "colour": "#a1abbd", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744971291, "uuid": "1feb769b-d296-4fd2-8777-6a0388e38d7d", "value": "T110E0C682583BC1090C8BE020986EEA049A2133810065AC943BECE9C94F853E0C907A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744971291, "uuid": "2c29b65f-0fe7-4770-8e96-c182dbf71f4d", "value": "6:qFzLgD+q9NiI/DiSKB8SFFjrOLgyKBM3S1E+m7uXzyK0lje5LHeJXVl4Nhdx434A:NqqSITKB8CjiLgyaIS1ETgzyLteU4Nbi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744971291, "uuid": "0ee006d8-406a-4e58-bae2-c4bb3ce66871", "value": 365, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744971291, "uuid": "468c3ffe-91c9-46d4-8529-77f2057557ae", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf7d873e-718f-11ed-9397-82aee05be84a", "comment": "Malware payload", "timestamp": 1744973314, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744973314, "uuid": "b7bb006d-d89e-4af8-9dfc-5bbebe14f2fa", "comment": "Malware payload", "value": "dba2a49d32cdcf3a633ed6b7bf6e004f", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744973314, "uuid": "72c31234-1c65-42f0-ae56-6183ba6865e2", "comment": "Malware payload", "value": "56cf2b9b3dae63e1fd2652f7f6597f4bc3a6c3c9b3c13f84d4f663791b95e8b2", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744973314, "uuid": "dca47ce0-c7f3-42f3-aefe-8763e36b9e68", "value": "T14EC2E0846611EF52F71004732D6CAAAC4E7BE75A0BBB3061CCE5FE8DC35A51A188F3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744973314, "uuid": "d4b9705a-ae21-4eea-9f24-37e63e9baca1", "value": "384:flzEBkDOvTCZuQEkymy/Gf+3pK9pGr39KKD6sq+GJ4kjNBrHKuxTnxl/KEuBmskN:pwkyTc9pHiGJ7bLxlpuYPW55e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744973314, "uuid": "c7cf8324-7a0c-4e18-abf7-4756b3ea88e5", "value": 27360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744973314, "uuid": "f928b58d-a45e-4f55-8890-58a28e20f8eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bf60909-1c43-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1744973500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744973500, "uuid": "4b6581e4-4ce8-4049-9b8c-627e8b9c2bb7", "comment": "Malware payload (Amadey)", "value": "8ff6524fff62b91b686d87d5ce6e75eb", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744973500, "uuid": "29810c8e-9b50-4373-82dd-77566d94596a", "comment": "Malware payload (Amadey)", "value": "d6773dc2eb57638b45805e22ec0d70727bc62b5d66ce8762eec621ca14fa458d", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744973500, "uuid": "9a708826-6e89-4c7a-9291-ef2c1ff9a972", "value": "T1CC9533113AB86956C98608352A2F85EEE7560D9181C2162E7E18D0FFE447F21FFB9F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744973500, "uuid": "59e60694-f7de-4655-922f-63c9a44caf09", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744973500, "uuid": "6d3ad8a4-e17e-4a75-b616-e5880dffcedc", "value": "49152:pDAfRi3ke0x+JyXIF8OqhxKAuttrjiDzzd:pDA5C0x+sIChsAuvrjiDzzd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744973500, "uuid": "e458ce1f-2633-43c4-9f5b-8fbd49eca572", "value": 1891328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744973500, "uuid": "f58d7327-fb58-4704-974b-f2662f902471", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f415473-1c43-11f0-82df-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1744973720, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744973720, "uuid": "c9ff9d35-f4fd-4544-9a66-bcda0ca4f062", "comment": "Malware payload (Stealc)", "value": "1c40a602091591056d9aef16abb5d3a2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744973720, "uuid": "1d8e519c-065d-4a8d-926c-fba50558022e", "comment": "Malware payload (Stealc)", "value": "cb2325d6716cc4fbb15de859a31043d8f124bb197b92d21eaa3a64e790cddb57", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744973720, "uuid": "377a581b-dff9-4d0b-b158-167a87b2ac76", "value": "T162C5330FCEE61C22DE0F51BAC3C85D6B3707A6348D922A0B1681D9313B1FB1F97666", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744973720, "uuid": "614def41-29a2-4bd5-9ab3-6bb9f0fe1bad", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744973720, "uuid": "d9466ea2-9fcf-4694-ace9-855f9ff8a701", "value": "49152:fKCeZ1CDRAidWIHBRNcYzYlbko6b+VyzGRJzfxZpOgSSO9ZG:fpRFjhzBzYlbk9CVy+zJZpOFDZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744973720, "uuid": "105c0fa8-bad1-434b-9922-cd1e888c121b", "value": 2532352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744973720, "uuid": "242707e2-2e7b-4442-9cae-bb2dd7c87bd5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1d924c6-dfe8-11eb-bc10-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1744974006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744974006, "uuid": "12e23ec4-0595-4230-a5fb-5a1fd8f2620f", "comment": "Malware payload", "value": "6b0fb88c187a6dbf48017f66f262edab", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744974006, "uuid": "c8912c43-14f7-4f31-aba4-a61bc8dc45ed", "comment": "Malware payload", "value": "ded36b111f815e57e2658bd881beaf247be1fea999902456df83840100f5ae65", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744974006, "uuid": "397ab9e2-cdf7-42f7-8e52-62747a5234fa", "value": "B9D3128BEF368C1FDB002E7216DB4B9E6C6D395B41CBF4A8F9C1818F13A11C57952215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744974006, "uuid": "fabbe338-2fb1-40e0-9335-676dfb7c7a28", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioX:p3lOYoaja8xzx/0wsxzSi6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744974006, "uuid": "3a111556-a68e-4ba5-8f19-ecac51e1a528", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744974006, "uuid": "b2d3c27b-3363-4c76-9d1c-ec495ce156a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65259075-1c46-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744974911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744974911, "uuid": "b1401da6-3236-44cb-88ea-a71c82845a42", "comment": "Malware payload (Mirai)", "value": "224f957191d19c9d36a891b10563051a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744974911, "uuid": "b0210aba-f45b-463b-ab7a-8a6af6c82639", "comment": "Malware payload (Mirai)", "value": "e319dc428af6f24837db4624522142efd59a6e5a014ff3d01f227f4cebb94865", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744974911, "uuid": "09a5f087-989a-4683-9e33-e20952950ff3", "value": "T1DFE2D0E0D604C666F77B213E213FDE0D96781D44CB469E97B0D4EDBEA0634AC92688", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744974911, "uuid": "d5e75479-ceee-4dae-8967-dc89458efbe6", "value": "768:Xvl0ZpjzsxV5D4peVM75BKGiHrxcksoozYt76nYLWleNP7HO:/l01QxV5Aeor+dckTovnYLeetu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744974911, "uuid": "feedb991-554e-4218-88b5-7c18f05aca73", "value": 33196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744974911, "uuid": "468a1ff2-b9dd-4033-90f3-9ed185e1bd4d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2def0288-ad00-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1744975527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744975527, "uuid": "cff286c3-7ee0-4e61-bbb7-3eb1efc38d83", "comment": "Malware payload", "value": "d06a40f6716ef0a6e0fdb26ff6e82884", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "tftp", "colour": "#fd3120", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744975527, "uuid": "f9a3af5c-be08-42e5-a682-ce40fc766dba", "comment": "Malware payload", "value": "a0d4456c848f2f8a97441aad14e0fa1fc1a5125cca94743c416eb288ee3e7b4d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "tftp", "colour": "#fd3120", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744975527, "uuid": "d781e982-020c-46fd-b1c0-445ca8df83e7", "value": "T181A30A96F8A28B56C4C557B7FB4FC75637231795E3DF36038A184E34278B50A8E3AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744975527, "uuid": "bf736915-4a92-41fa-883e-0c783feab76a", "value": "3072:9LOuh02xHCKQnqZ9YfMXKgyLlBZSyPjYEO:FOuhPHCKsqZ9YfM6g23ZJLYEO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744975527, "uuid": "bcd1913b-6fa6-499b-b765-2b66f8de01ac", "value": 102400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744975527, "uuid": "bf37d758-6349-4428-a313-9d0a355bed88", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db0bd8e9-1c47-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1744975539, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744975539, "uuid": "0e01c8f5-83fb-4a9f-aaa5-bede1e0e7bfd", "comment": "Malware payload (CredentialFlusher)", "value": "4c70bc5dc6e6723cfa5f1897122f49e7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744975539, "uuid": "518315e2-e680-40bf-a2a4-ebc8b511a122", "comment": "Malware payload (CredentialFlusher)", "value": "5a9a8c33f223cea52c6a1bf6ae3dc74ece35e5bd84c5b95ed0e7235e9d32b4d7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744975539, "uuid": "11b1475e-9aef-417a-a65c-eb84434c6e9d", "value": "T122259E0273D1C062FF9B92334B5AF6515BBC69260123E62F13A81D79BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744975539, "uuid": "c9865757-8a14-49c4-a278-dcd59053aba1", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744975539, "uuid": "cc61a31e-310b-4e17-91c8-301a37297ea3", "value": "12288:GqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga9lEkrt:GqDEvCTbMWu7rQYlBQcBiT6rprG8afx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744975539, "uuid": "2e446975-8c51-4513-84f1-3ca9968b94c1", "value": 971264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744975539, "uuid": "6ea000ab-7758-47cc-bc6e-64a03fc4333b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c41004d-1c49-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744976104, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744976104, "uuid": "f717ce0d-145b-4a20-ad98-1cb04f0d7569", "comment": "Malware payload", "value": "bf824b309779306d1987419fabe6eb7c", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744976104, "uuid": "328abb57-c01f-49da-9c88-72fce6214165", "comment": "Malware payload", "value": "f5eccdd0753e63302d0015449a211a825fc1ee0b0dddcdd4f7a6746ceb8d9e84", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744976104, "uuid": "7b1c6b78-797a-410e-b6d5-30bca04eec93", "value": "T10341DED9D772FF26E507AF543101C701B88B9EB327824921DA9924F3C89ED243467A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744976104, "uuid": "c6240d15-3843-4202-925d-dab2c2e46c50", "value": "24:GIbTAHWaHwJGLpGxmcvtrHWjHw6H8pGxZ37csJRtoHGx5J3hsebucxj:jTEWKwIAWbwIwETR1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744976104, "uuid": "ea95a861-d7c9-47dc-9e9b-0384a3f5b83f", "value": 2045, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744976104, "uuid": "1cad2ae7-5282-4bb9-b4fe-39f0a27c6600", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "099a9f75-1c4a-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744976476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744976476, "uuid": "93a9be16-c95e-4c7f-83d5-cc6a97f2ad1f", "comment": "Malware payload", "value": "c02115763ed025c9e9913750e7c3d8fa", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744976476, "uuid": "60bea531-4e17-49e9-b023-504406a10578", "comment": "Malware payload", "value": "784401096d1792f444a6c77a7e5c2f927e03413d601e422fcabbdaa1bc34f159", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744976476, "uuid": "e8834a3a-0c0a-4a35-8a59-bad8efe462a9", "value": "T1BFE195368D5F1E14D742A23513EE68FCB01E4B67590601DA748F2CA847DE0E468FDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744976476, "uuid": "14b58b78-880f-4e7a-af3c-7058e5123eb9", "value": "96:JcNQY2avhNEK3nYnkUuk/uk+XYb9jujYIYDid29in82JNLG5noZuFgrqP8uFedVL:eNagYHsYb9jA/KCXVG6zp1dpJDR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744976476, "uuid": "f195b17c-66c2-4acc-a1b3-7c3dd3e6464e", "value": 7059, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744976476, "uuid": "bedf5c95-05a0-48ca-ab6c-defcc9396cbe", "value": "text/x-php", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3f0cde8-1c4b-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744977245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977245, "uuid": "ac0975de-c011-4141-9228-813e856e8cc9", "comment": "Malware payload", "value": "461dcb46775cf0690a0ed41746b3da60", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977245, "uuid": "32625d6e-88a4-4bfd-9ba2-667be557424c", "comment": "Malware payload", "value": "6a82e620fdcc5e11e5aa776bd70c120dfb83a921d89edcfe40ed899d227e2ff1", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977245, "uuid": "08eb4fc7-6427-453b-bfa9-56c404cd9aee", "value": "T14EC165173902D0268AF37766CC57E618CA1512F38652950872CCE8D4AF7279FD668B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977245, "uuid": "1eb4371f-37c1-4e59-ba0e-48a613e8d8bc", "value": "96:YMSEb80dSqsKrfC6dyDr0huGCQAZA5wk7y6ACytfaD63//s/WyloE:PpHsYfAn0huGCvZA5wGUtBHEWjE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744977245, "uuid": "109d480b-f8e1-4705-9450-d697f8fdda67", "value": 6137, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977245, "uuid": "9b29c25f-cb3b-48ec-ae82-b2927587d765", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d675c629-1c4b-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744977249, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977249, "uuid": "aafb946f-c82a-4de3-93ba-05aff28ba225", "comment": "Malware payload", "value": "0c9739181624c47d44150ebba0247e28", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977249, "uuid": "6d0eb366-5ed6-436e-a223-b9ba72fbc40a", "comment": "Malware payload", "value": "80ebc03ac8cb2e89d5295bc54ac6897d793f9bbff15d2d8a7a19974f6aea581a", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977249, "uuid": "f3237fd6-b9e6-42a1-9c62-4dffd7beeb7a", "value": "T15931777B5C03EFAAC3B311F142A6E44DE649F1139D905404FCCC8E6C6729298D2A7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977249, "uuid": "6ef0eb39-4485-4642-9236-19e3f0e792f0", "value": "24:0LCzaRFTKw4PmO3fLHU8+omQ6mUfaz8JilTZI1VDmm/ANEzVCPsm/eqYgDVTIePJ:0hRRKw4Pm2fLHU9omQ69Cz9lNIXlAXPZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744977249, "uuid": "637f086b-332f-4324-8670-dc2f661335f0", "value": 1481, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977249, "uuid": "decfd775-f6cb-4fd6-a834-9694d5b6615b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d86e8a33-1c4b-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744977252, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977252, "uuid": "e9039825-fa7b-4273-8774-ce7462f2f771", "comment": "Malware payload", "value": "3b729b1da976452e6d0ed6bd74fb4280", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977252, "uuid": "5b944df8-21bc-4fb0-b2a8-2967197e2477", "comment": "Malware payload", "value": "37c95d90bd8309700cf6f7790acda9b6332bc1d3bd24df878d11a1ad348e92b5", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977252, "uuid": "456bd7ed-bd1e-407b-bb39-7e3de0952cd8", "value": "T1F4473312C116072BC65A2E356D9A2622F35DE85BB37A51B73F90F2407DD3E9503ABF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977252, "uuid": "12000eb2-2d0d-4915-8f13-f46df720872c", "value": "786432:75Ki5eeMSyQ5YyuwEiGpLVQkajA+zGUr+q1XQ8ylMI3SWs:7Ai025VVEDROzA+zXqqhFylS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744977252, "uuid": "f1dfcfb2-8371-4f38-826b-a4d7b2cf8cfe", "value": 25427667, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977252, "uuid": "09a2b18e-581e-47aa-b530-d426a8c8a609", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9149dd8-1c4b-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744977253, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977253, "uuid": "e48e81ac-756d-4385-9485-d5a9ff481665", "comment": "Malware payload", "value": "e277618b1d564d81b07b6d8f18365c98", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977253, "uuid": "59f45674-259a-4fda-8817-8fcf1d14c00d", "comment": "Malware payload", "value": "a8db2a959205924bdad793d719ac121e432dcd616dee407be45135fdef129769", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977253, "uuid": "7f9cf0f6-0ceb-4043-8530-e143020e028c", "value": "T189C533CC2643D941C5CF767229B6DE6422D631E54178262C10584B8A98AFE7FE3B9F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977253, "uuid": "142a025a-ecb3-44dc-a3ef-7cd69e22a4d5", "value": "49152:glQ/dq+v+X6JeXG4GyN1YplLS1HqI9XPR50KZN7Ud7Td4Vf9GTVLW:CR+2UeWbyrmlLuqiXPgkcd4Vf9A0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744977253, "uuid": "361f2e26-3495-4a8c-8804-6f88b8d2f0cd", "value": 2547705, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977253, "uuid": "37dffedf-e601-4615-a8b7-c7f589b56b44", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4a78698-1c4c-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744977649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977649, "uuid": "fb8d7111-9aa9-4ff2-af71-7b648d450626", "comment": "Malware payload (Mirai)", "value": "5c616be5017000fe0bd41eff527b9e9f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977649, "uuid": "6c41c040-eade-4203-9075-cdc1dbe71aba", "comment": "Malware payload (Mirai)", "value": "ed1df8ec98b17e72ce1bba8af9a58804d23cf172273cea2c5f15bfed729dced3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977649, "uuid": "d93f4205-0389-48c7-bc50-a998fd16370e", "value": "T18D72C0391298F8A1C7F0193BD53DC2C7239456BD92FA70B136522E2C7DD38290A7D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977649, "uuid": "f23787cf-47d6-4107-a20b-f3dd2239abfb", "value": "384:KQpJFWcRXaF3Uj/GtJy9f96McaTMFhymdGUop5htt4:rDFWcqo/GW3lgFs3UozLy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744977649, "uuid": "b775f260-5c5b-480c-a87d-abe758799ad1", "value": 17116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977649, "uuid": "54ce2e4e-b1aa-49a1-b242-c887f55ef1b3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37ab06aa-1c52-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744979989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744979989, "uuid": "36f35c0b-a73f-43c0-a924-055c517abafb", "comment": "Malware payload (Mirai)", "value": "307cf2578cafc1a484a122593d9affbe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744979989, "uuid": "aca9bc9a-1df8-4034-8ab7-d984f8e55a89", "comment": "Malware payload (Mirai)", "value": "d27512de63869fe802e228523e05ad1c3656551583533637620f5d0e32ddd7ed", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744979989, "uuid": "6ff7ce9b-c779-4068-98d6-a6d6eb7f2e44", "value": "T15D631A9AF800DDBDF80FD6BA4017090ABA30A3D152831B376767BDA3BD721A55C16E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744979989, "uuid": "a6879791-b661-4cd4-a5bb-1599108bb606", "value": "1536:J1C68jtCXJ1+dR81Lt5fDoBDFakJQUDO1H+4ZS:J1C68RCXL+dkgBZaoW+4ZS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744979989, "uuid": "b496a240-2da6-4292-b77b-751796f3dcca", "value": 68308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744979989, "uuid": "02a5764f-086b-48ce-8ae0-0e5005b24b43", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "533ab404-1c52-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744980035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744980035, "uuid": "56da20d6-45df-48d8-8598-f02a11db5ca9", "comment": "Malware payload (Mirai)", "value": "f8a661081db92d8d1e63457c861d54b6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744980035, "uuid": "fc914757-db86-4250-bc6b-62f8f7acb9fd", "comment": "Malware payload (Mirai)", "value": "7ae1164965bdc43a242337169d49554b5e99fe0b290d7c1580121cdf8863848c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744980035, "uuid": "89894c5c-29d3-414d-a43e-0af4bd07668d", "value": "T1CBE2E1B4D58D5886DD9B2E7AAF12BBC23BA14C5A7BE2AD73600583E0D60BD331310D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744980035, "uuid": "46059c4c-1eae-440b-b34b-64f3062bcdde", "value": "768:ngASgoc4OqvXEPliZh2JgAAEuWTLwg5zEpEas8U4uVcqgw09V:npSgoc5SXv/DREuWvwg5zE+NP4u+qgwc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744980035, "uuid": "062fdce2-3144-4325-b66a-394c3a28bc7e", "value": 32692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744980035, "uuid": "e0ed777c-ad71-47da-b7c3-28279a92e04e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3115d4d-1c52-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744980196, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744980196, "uuid": "b6dce1d6-9f2c-41ea-9606-b916bb4bcf79", "comment": "Malware payload", "value": "8e0af79bfd5a3fe10142b88076087946", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744980196, "uuid": "333fc480-a92a-4f88-8904-39dbfcebe39e", "comment": "Malware payload", "value": "8e195bc044a778143869dc29b0c9e1966aa50b11a4738d55378d3d1b48567a24", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744980196, "uuid": "55d9bd9c-309e-4840-b966-b9d7ba777695", "value": "T1DF34F12F2DFECFA11A933948CB6C2F09E3E05AD534B5F64D395825B573348607627A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744980196, "uuid": "e7cf4d66-05b3-447f-aba7-41ea29d0f4eb", "value": "6144:yd4Waz3Mr4UY3sWeDsj79/u+/fz2M2FzhuCEluIi+f:SmLMsNss9/u+/rc7up4of", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744980196, "uuid": "18fe1792-e76c-44fa-a9b6-0001cdad9e12", "value": 247885, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744980196, "uuid": "86412e49-16ee-4349-8a18-344f1564a88d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51b74465-1c54-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744980892, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744980892, "uuid": "831a98fd-2701-4f3b-93b3-b39a00270a9c", "comment": "Malware payload (Mirai)", "value": "e15868f57122fa07cb874b87d7ace399", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744980892, "uuid": "a59551eb-5446-4d0f-95e3-771c86b737a0", "comment": "Malware payload (Mirai)", "value": "bb89f6967ff6596e92592944dc1dd36d8250b077a8432bfbb4e5028b48bf82c9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744980892, "uuid": "157597ec-876b-4347-ad56-001c649c68e4", "value": "T1B2E2E11451248DB1EE340037BD1B9A81E63E0AFC7B59F6B332A1D5ACC2D684DB875E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744980892, "uuid": "697f06f5-855f-4d23-ba95-e146ddb526e1", "value": "768:QlAcja72E/4Cz3p5kZW0lEfFpLe3K+vZUhtHpgiK1JLAhBobQs3Uozz:4AnJ4Cz3p6ZW0lELLe37mBmLMBoJzz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744980892, "uuid": "c0317abb-f708-4126-9b91-d5c0671d372e", "value": 33960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744980892, "uuid": "e561687e-eac4-485c-bc8c-d3536593817b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81e7e17d-1c54-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744980973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744980973, "uuid": "22b78de0-5ea2-47c4-83cf-f371ed26c48d", "comment": "Malware payload (Mirai)", "value": "105d38bd6aefe8938e91c7f7c94eb783", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744980973, "uuid": "597ea4a4-5aca-405e-90a7-566490d1f675", "comment": "Malware payload (Mirai)", "value": "fcd4e12fe946d978c6a1abf32961176eeaaeca86080d725dc0e7f705eed93ad7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744980973, "uuid": "243f4751-7fcc-47cc-a0de-df783af79c76", "value": "T1FFC2E191DA89186FEFBB68985C12E1CF73D31FCE3783486170A34B215A4C551AE254", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744980973, "uuid": "631ad58e-9df7-4312-b072-475b5d0c4f36", "value": "768:2BXsFe291rPVWFb7Q5DE8NbC3D4dD2dqaAc4uVcqgw09M:2Y91rPwpc5DLNO3Dsyrp4u+qgw09M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744980973, "uuid": "17703e04-7d4c-4344-86c9-e906e8414d30", "value": 28188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744980973, "uuid": "b8ae9cd4-2f37-4d39-b3f8-bf401bfc38d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "922b58a0-1c54-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744981000, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981000, "uuid": "53448d7f-eb11-4f97-b420-e8f63f6ad203", "comment": "Malware payload", "value": "70177619d289ba5bd0950bd44d0e6f4c", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981000, "uuid": "ad1918af-dbcf-4326-bf1c-7ec6333813ca", "comment": "Malware payload", "value": "d9abe01cc4937f5a3eff7557c2b28ecdb119990aae9e3dab2ccd41eac32c998b", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981000, "uuid": "1e8e1474-dbe5-43b3-be29-b4a6742e52c6", "value": "T1D295331F7864B0C6C2190BF69603E34FBD7F66DA0A0F8B464BEE5C1D901578BF90A8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981000, "uuid": "b25deeb2-bf5c-418d-a73b-ab278e0e68a3", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981000, "uuid": "03c1bf0f-1b31-49b3-ac13-b484709e4e41", "value": "24576:5DysSqYsima7iJ/GT8gIRvJ9lhHbPrCV5aFbrWgjzFx/iTxtkxaMxFXOF4YhNu1v:5EqhhaONgIRv3rrCV5acw8MyhxsaHKv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744981000, "uuid": "c754a4ec-72db-4c09-a1bf-a8a78d547d85", "value": 1921024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981000, "uuid": "76e32b0d-5912-46c9-94ea-0fd6959abf75", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d888266b-1c54-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744981118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981118, "uuid": "5db95f94-254d-4b28-aee1-a6d123efa635", "comment": "Malware payload (Mirai)", "value": "881364f5d4e0ec04b56aaab46bdcf1f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981118, "uuid": "dd6fc856-0ac5-4254-8388-7d38eb8e5ab9", "comment": "Malware payload (Mirai)", "value": "d9e2198ab52baab20c591d76dd22528e8d28d86721fb5611825a4ddaf0da71d0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981118, "uuid": "a92b811d-2bec-4266-92b2-28a78d2e8f8b", "value": "T12BB38C9BF2471590C8A346F007CB4BDE3E2363819F1799E73D2D2579287A2DF5A05B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981118, "uuid": "bd1bcf12-c4a4-4dac-8951-263cb9efae5b", "value": "1536:LFKR0XQLdT/zRFjgszYJia3htwl48/wOTMxkxCEhCgOuG+/LW+:LUR0XQZRFzzYJiaR6lBTM6CgO1+q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744981118, "uuid": "8b2f99df-5030-48e3-9b16-21cc1670af9f", "value": 108276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981118, "uuid": "48c2bf0a-28de-469e-a90c-7e7c227f763c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dade329f-1c54-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744981122, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981122, "uuid": "d79cb50f-2b94-4fe6-a940-3e351893bfec", "comment": "Malware payload (Mirai)", "value": "07d9e002fdc313137260f242fffea012", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981122, "uuid": "2a6b6827-b23e-48cb-9655-04a4427e2e24", "comment": "Malware payload (Mirai)", "value": "64d232162b570304117850b2315d66f6127b69db3bb1ff14fc9deab4009d8fb5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981122, "uuid": "c762d56f-21d7-47c6-bbe4-0c2867d3bad9", "value": "T17C538DA6DC365D54C0968270B4B48FB52B23A1C482431EBB1AE6C3BA9497D9CFD05F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981122, "uuid": "60025baa-9333-4882-80da-4d923f6f221d", "value": "1536:FaT613CxK4qu3j2Kdm485nhfCz2CgVURHS:F861yxK4qu3jJdInhfDFSRy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744981122, "uuid": "7740d9e2-0bfb-4ad1-b99b-b635c6ed5ceb", "value": 63256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981122, "uuid": "4d42defb-cba7-44e4-9f15-9b297ce40a7c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e586970f-1c54-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744981140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981140, "uuid": "e8507f2d-e594-46ff-9433-a444eb786492", "comment": "Malware payload (Mirai)", "value": "5fb1c2f2ab245a78a6f7843bb52cea24", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981140, "uuid": "81945ff4-760f-4ba3-9c49-c6f56ce16243", "comment": "Malware payload (Mirai)", "value": "b7ecb32f80c033a8de8389050d4387e6422457904fadb3ce5264d1c6c7ba9998", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981140, "uuid": "ffa59676-a28c-4f3c-9dbc-442000e091df", "value": "T1A982CFA1195295B0C43704329E7EC7CA7B5742F181BE717213660E28CAC2D6A97BD8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981140, "uuid": "24dd5994-b883-44ff-b0f2-628c41e6fa9c", "value": "384:0UjlAzyaEHgJ8krPSWVtSqpmlt5pYnhymdGUop5hXA:Njl0gHa8kITX5Wns3UozJA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744981140, "uuid": "89d497f8-da30-4b57-aae4-e55a4ba6d592", "value": 18188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981140, "uuid": "150dbafe-cfab-4e4e-b70e-ffece4502312", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ef387dd-1c55-11f0-82df-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1744981290, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981290, "uuid": "0c337734-818a-450c-a63e-7330c21641f3", "comment": "Malware payload (Stealc)", "value": "a437922f28c4b19e05144cc5c333c633", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981290, "uuid": "b3a2420e-f492-46af-a935-ff6407635ba8", "comment": "Malware payload (Stealc)", "value": "ef00e18c2bd179b4ab6662969dd060d346dfbd2da5d1786c511827383c5e8da4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981290, "uuid": "7a10c55e-dc60-470e-9c30-d4e99597209c", "value": "T1D9C5334EC7940C75DADED7BE022A1FAAFB73AF41C25254742F8494C972A362F6B481", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981290, "uuid": "b09ee18e-b6fd-4251-9fd0-961d93b19cd6", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981290, "uuid": "49c23f97-f136-4ea1-897f-172f1a7c5021", "value": "49152:FQmGzmT/4vcE/u+8qBAMXuWJeOxe1ewo9FaIqm0NrV7o5/9nk:Ox9b06e1eTbn++5lk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744981290, "uuid": "9eb17a60-2026-469e-8d14-49a2a38bed9f", "value": 2515968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981290, "uuid": "f40e5f05-1435-4421-ae65-e0e92bd49102", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9378a23b-1c55-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744981432, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981432, "uuid": "8c95725f-b7b8-4bd1-8e4a-8ba671d3d38e", "comment": "Malware payload (Mirai)", "value": "8df7020f7be054337fce7fd96a8fa9ec", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981432, "uuid": "af5880f3-60cb-4324-9853-62cda3d0881c", "comment": "Malware payload (Mirai)", "value": "b27e18b106014c871934a7d8785c09ea04e3cb1f18e960f4b90d18ab00c3192c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981432, "uuid": "7f7e8ee8-3100-4ce5-baa9-4e574fcacc82", "value": "T15FF2E175661208E5ED5ED5B017ED4B2E2A039F2178A3DB43584988D28D829323DE3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981432, "uuid": "cd767572-7e6d-4b4a-af17-8a061ee4cda2", "value": "768:QyNxmzUEeuPGlQeiKPDwGqOV+CJgGlzDpbuR1J4:Qy7mJJ6KpKdVJuO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744981432, "uuid": "381551b9-a20d-430b-a830-746d078d09fa", "value": 35592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981432, "uuid": "f592152b-dce6-4910-a24f-aa001387449a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e89a3634-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1744981568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981568, "uuid": "72b10d2b-ca54-428d-9ec9-c20d929265b8", "comment": "Malware payload", "value": "70af65a13a14e5deb73c31c8829dd998", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981568, "uuid": "c14830e0-ac07-49ef-af3c-b95ad3b1ffa0", "comment": "Malware payload", "value": "feacba94918d32a51ff751ae4b98e9ec5823aedd525ad283ed99653b3f23545a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981568, "uuid": "b0fd2055-4c8a-4886-b2f9-397473a4a21d", "value": "5923028623A63F72D52148F5D7FCEF85A14A7E94AFE5180E7C113698B07035C28C8C1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981568, "uuid": "147dd39c-c460-4526-91d9-33ab8fec7652", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsDm1Xo0Wh:yYI0ARqw1qAEW67UIWi7M8gmfmJo0Wh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744981568, "uuid": "bb9b5859-be5c-4a17-9a48-6a1a1a652124", "value": 47784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02962fbf-1c56-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744981618, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981618, "uuid": "0473f88d-188d-4df6-945b-13554b209f1a", "comment": "Malware payload (Mirai)", "value": "fdf6794a120ccd518c8aed8caa6a7dbe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981618, "uuid": "cf9fc59a-ce3a-451f-bc11-e0d7f754ddfe", "comment": "Malware payload (Mirai)", "value": "76b498a2d7ab8658ef2d314c307961323976e9a333ec0d94df3ae1896af900f4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981618, "uuid": "aceb8db9-b560-428f-848a-ea73d6496bd0", "value": "T141F2E1609C3F4AF5817818758EBA4E846B036BBC90CAB575A674FB7593D744EB43C8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981618, "uuid": "9bb86b32-e695-49e8-a442-8a5efe2d9551", "value": "768:VkordBh8h3WKb+Kf9HLCcvFk21CsDPTQRjprAfpwQcPaq9q3UELCU:VkkYH9rCadhPQRSfGcfLD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744981618, "uuid": "065e0186-6ff5-41b8-a0f6-71fe9c75d7cb", "value": 37596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981618, "uuid": "57337663-cc3b-4cfc-9e4b-bfaedee67d34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d4f4ac0-1c56-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744981690, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981690, "uuid": "89e5a23f-c1da-41dd-8fce-16382e51e527", "comment": "Malware payload (Mirai)", "value": "d12a47d038b3533140f923438067d17e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981690, "uuid": "99f9e271-6031-475b-9e06-bc708aabbaf2", "comment": "Malware payload (Mirai)", "value": "b0df5fbdc8c0a8ab0352772f0ddad1ed155e2d182ef413b3ed5ef4316b2f0c5b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981690, "uuid": "c8a74d36-4f54-4666-9f97-da4158f47bdb", "value": "T17843022BC98AFA3ACCF3B97B642F91A6610466FCF0A535B32AB06450DDD05506F6E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981690, "uuid": "0fc81bc8-a9c2-4ad9-88ac-1c31c350b472", "value": "768:2/bzURdTYkc4kEB21v6gcuZVz+E4TNKXwCrY9q3UELO1ggYDeaFeK0FpAI9f7JD:MkT9FI1ukjLO1ggYDDFSDAAzB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744981690, "uuid": "7e078a8e-0703-4bfa-81a9-c18e66ea00b6", "value": 55420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981690, "uuid": "2eb19284-a756-4b7f-a855-dbe099d52e13", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d03ef79-1c56-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1744981743, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981743, "uuid": "0ff51b87-e3de-4794-b470-4be7f4f5fdc6", "comment": "Malware payload (CredentialFlusher)", "value": "59d43cf461680922ff35efa3a0dc33c4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981743, "uuid": "bc0d38a8-653e-4559-bfbe-a3ce1166e738", "comment": "Malware payload (CredentialFlusher)", "value": "c9fab761ce6f76721c3ed572a697c0ca59e32d8efc0b7bffb9f99a18293988a5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981743, "uuid": "e7cf7953-6261-4a2f-8968-5284b6459f41", "value": "T142259E027391C062FFAB92334B5AF6515BBC79260123E61F13A81D79BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981743, "uuid": "7bf942af-7f88-489b-8252-17b52c9e5c6d", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981743, "uuid": "c4bdc74c-1858-4f10-8d7d-aa2a68753800", "value": "24576:xqDEvCTbMWu7rQYlBQcBiT6rprG8aZOT/:xTvC/MTQYxsWR7aZ6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744981743, "uuid": "8adfb8a6-aac5-49f8-9c34-126e9ee35786", "value": 968192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981743, "uuid": "efcf4d85-e9f7-462f-a972-e32a82c68a17", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90e782bd-1c56-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744981857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981857, "uuid": "ed1fe9d2-afed-42d2-bd14-d6be6674f1b7", "comment": "Malware payload (Mirai)", "value": "ee892f3ea15ec319b3d5b83313f4996b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981857, "uuid": "b8117930-9199-4d47-b0ca-3cfa14f56ff1", "comment": "Malware payload (Mirai)", "value": "2f33ad6d648aa1b1b21f54d0a395624afbf885713e88492286354357b46159e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981857, "uuid": "1e17559c-5831-4e0b-8116-4cc0eebb1c28", "value": "T1F7731997F801DD7EF80ED77B0497090AB670A7D146831B366397BAA3FC721951822F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981857, "uuid": "bd55da44-4403-47cb-8737-6dece2c5aa24", "value": "1536:+17oUinsWrQdalL8fYcdgfQGK+5mVVXrmNlU2qkU0/nhK:+1FinHrQdalsYzFKImbn2qkP/hK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744981857, "uuid": "ddb20d26-ed5c-449d-81fb-a2431ddaffd9", "value": 79384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981857, "uuid": "5cc84dcd-1083-423d-b0ae-4f2837a0f884", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f033d826-1c56-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744982017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982017, "uuid": "9f629543-3ec1-4800-996b-7ea231dd812b", "comment": "Malware payload (Mirai)", "value": "c5b9db7b9db2cd2a39a1fd1d7d4a4f63", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982017, "uuid": "8fe0900e-aacd-441a-a757-9d327d3e0294", "comment": "Malware payload (Mirai)", "value": "9c1772a7fae3f1507b42def43bb871f002efe7edc7e5089b84871cd8376dffc9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982017, "uuid": "1e9c2590-a602-430f-93cb-7082ee2e654a", "value": "T199437C33E4255D90C28949B074A88F741F13E1C892932EFF26A9C7B5A453DA9F906F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982017, "uuid": "23933106-2d0a-4285-8251-1f1ae6db5656", "value": "1536:oaWTGwtwGgsCyycHKKhJs/JXrXcCar5IMG:oL6TsC8thyXrXcTIMG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744982017, "uuid": "26cd6aff-9e74-43dc-8c5e-21df2f000a30", "value": 56240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982017, "uuid": "1c3fa2a1-d7d9-4d8b-8c16-f50447a6103b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fa90e9c-1c57-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744982123, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982123, "uuid": "64e20d66-eae6-48ca-88df-387d688bfbe3", "comment": "Malware payload (Mirai)", "value": "ca4a0a02b7141c05e54a70129e4d0656", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982123, "uuid": "90d08419-a1c2-426f-9a46-a4babc920e91", "comment": "Malware payload (Mirai)", "value": "ef2b75386a726e43838700647354a47a10ce9fd8c6dd41d0d22f937894051352", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982123, "uuid": "e2436c7e-f57c-4386-a86d-3fcc12fb0424", "value": "T10A633A22F9751A27C0D5A47921F74B19B6F186DE21E8C71E7D720E8EBF21A402943D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982123, "uuid": "cb247426-50f7-44c4-90a1-96ec9cd55962", "value": "768:I+oLmgiL2q925g6KLNUXltxFWhtSFSX60i6WNPK+9KNrhO+75sXTkH21t2wXIz:I+qiL2Syg64NUXrxFutSFSsUt75otfXk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744982123, "uuid": "e94283d5-e067-490e-a977-486010c891f2", "value": 66880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982123, "uuid": "afa53149-59c4-4927-8666-6f6fb8860e2d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6397ef35-1c57-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744982210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982210, "uuid": "86bf6a81-004a-4786-aecf-e3fff3f36858", "comment": "Malware payload (Mirai)", "value": "57cbca4641c13506ce13efd64c632976", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982210, "uuid": "3e8b7c6e-5144-4e02-804e-a9e0cadd471f", "comment": "Malware payload (Mirai)", "value": "6f6701923531f4b87e6d3986cd3ed7ad7ee31df4f58b063390a6dd6a662565ae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982210, "uuid": "62891563-167c-480b-a54d-12e3eb8d5d3c", "value": "T1C0D2D0B656023DD4D123C8BC2F3207912F1286AA6593DC5E57C5AA73BB0F12C78439", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982210, "uuid": "ebc76850-6c85-4419-aae3-4865295d8e4f", "value": "768:GE62e71qFEPotePL1FZM9mHlfPJgGlzDpbuR1Jy:zm7ZPoYLJjlfNVJu8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744982210, "uuid": "52ec47b8-2e56-4bb3-af1b-9dfbb68821ea", "value": 30852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982210, "uuid": "c46a1e16-e483-4cbd-9e7b-c4b606ec384e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78a05396-1c57-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744982245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982245, "uuid": "224d0608-49d1-4cc3-ac1f-1a207acb4844", "comment": "Malware payload (Mirai)", "value": "23892bb98622737a05b7697782a6446e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982245, "uuid": "88de354b-cbb0-4938-9d97-a062fa34c5dd", "comment": "Malware payload (Mirai)", "value": "0d2008c57f6d0d54b5246d3206c434915017735b348af9dd8b15fdbda2e05d1b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982245, "uuid": "838a3d3b-fb8c-4393-b8c6-a620792f69d5", "value": "T11AF2E16DD3634CF3FE740834C36D808536532BB9D775A3965AC081A4C2D9FD5A6B90", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982245, "uuid": "878bb29a-9e2b-4b8c-8049-0ed8e8400411", "value": "768:ci5YIiFHwFbNEXgCjQVGC2phXpdUKlbPKIF9q3UELjm:95bit6bN4gC8sThX/UKlbLYLS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744982245, "uuid": "9a42c187-eaf2-43ab-aeaf-59567b2ec429", "value": 34420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982245, "uuid": "ad8d4e4f-8f5c-4ad8-8e93-0f7ae8d3c1d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2524543-1c57-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744982369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982369, "uuid": "120d64a4-e38a-4dc0-8a34-0455d957f559", "comment": "Malware payload (Mirai)", "value": "160d075b93ab33997f452133ec97865f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982369, "uuid": "840e08fd-cad8-4aef-8661-ff1be7664114", "comment": "Malware payload (Mirai)", "value": "368522b14b9295b40e28de808445c752c7b6a3b1150298e2b0f5193fce290c9f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982369, "uuid": "faaa74a4-6d1b-4efa-8d3b-18ff3da09c89", "value": "T1DEF2D16CF0BA379BF8BECC3CE79E43104D8490D1114E6B5A6F224582FB9A547F44A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982369, "uuid": "b6e594ae-d0d2-4d1d-894a-8656b9d096dd", "value": "768:9DivF0aZj8jEH5nJ5XjtskbGBESCM8PxBGJhNH43WR:9DiGa9FHNJXskbGKSDhFB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744982369, "uuid": "8e2afb12-670b-4a33-9ad7-51487a99c90c", "value": 36536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982369, "uuid": "00b4b662-bbb2-491d-b041-7798d8be75f9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3db9e04-1c57-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744982399, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982399, "uuid": "2d2c03a5-20ab-4483-8db9-bf1cb934e324", "comment": "Malware payload (Mirai)", "value": "6b3000ac16d2685cf7a0fbcf60911fa0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982399, "uuid": "25c9124a-c9fd-4131-9be3-ae38d3cc89dc", "comment": "Malware payload (Mirai)", "value": "36675b51935594f6a5dc23f57d4eeec4ff773c07d334a0da240e74c842cbfc46", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982399, "uuid": "1a7495c1-71fc-4754-b677-549695f4460d", "value": "T1BBC2E060D79F2F1AE50601BBC15E8DE0412ED4F59A59D7CB7E0E5093BC0B9E18238F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982399, "uuid": "0f653dcc-d49b-4d7f-8575-a307f1542df3", "value": "384:M/+j6PHEMuc1FKKpwc+ii8AWttt7oNcULn5ZttGeTELz/+4+nt0dM3+v1Rc:4vfEMuc14iZttt7AbLntse4Lz1+nnAc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744982399, "uuid": "50f7ddf5-4b9a-44c6-b086-feed610d3d26", "value": 28112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982399, "uuid": "f10ca000-5748-4bf1-8944-52c7d521c52a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6dd6bfe-1c57-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744982404, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982404, "uuid": "41ca7fff-a936-4e46-8e4b-b7f0f10e936d", "comment": "Malware payload", "value": "c2a2fc0755fe6254c723221ad043927f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982404, "uuid": "875b65ac-7d35-42a8-ac1c-dee819e41523", "comment": "Malware payload", "value": "b7dea40630d211a7211b93bf142497799fe0f0f91a105dfffe6f1e6e0052a7ce", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982404, "uuid": "f1571f42-39ae-4012-8012-b0f79a010cbb", "value": "T15834E0DD70984A5FD6E26D9949335FEDAA35C40E430FD64F06ABC60CD046CEC628B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982404, "uuid": "a3871a32-8c1b-4de5-ae94-a5e69bd2b3f1", "value": "6144:Y7eQkXrhv5Z8JOD8d2v9qnV6FkX4f8SennEXGfZ2y:Y7fYv5CM4d2ldl/ennEXGfZ2y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744982404, "uuid": "1ad9974e-0e11-46bd-acdb-278fc9258358", "value": 247875, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982404, "uuid": "78f83285-28ea-4ba9-a538-194d7c56a326", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8413163-1c57-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744982433, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982433, "uuid": "8f4258fd-f59d-4ec0-9583-8da113170e57", "comment": "Malware payload (Mirai)", "value": "56875768714500c4465b83f045ccc30e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982433, "uuid": "2cc011d3-2775-4669-91ee-2c41514bc918", "comment": "Malware payload (Mirai)", "value": "9cf76051674fd8569639eb2e8c11adb5e9f319df5cc331e8465460a6873e785e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982433, "uuid": "e2d09e55-af5b-4c28-b077-04940e6b762a", "value": "T18D4301D99160BC7281A4A974D2FA0293176299F6F97C3CDD9409582C21D3198AFFDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982433, "uuid": "2bb95707-a991-4a53-9256-23c41cd8780d", "value": "1536:Dnah5/P2t2O95T1mcO2SE8J1G+1iL1uNUicGYVbHdQt3m7:jah5/P82o5FyR/G+gLoNUZbH82", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744982433, "uuid": "a84d7720-6de3-4076-83e7-2b0a040ef772", "value": 59340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982433, "uuid": "c3c8672d-2c9f-4101-9463-afc6c2326607", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a881594-1c58-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744982490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982490, "uuid": "5aa13f07-59a8-495c-9b4a-0e661ba4f169", "comment": "Malware payload (Mirai)", "value": "fa45cb5dc99f092292ab13e1a9f2876c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982490, "uuid": "2c0db13d-c2e3-4bd6-bac2-9b569ad2e612", "comment": "Malware payload (Mirai)", "value": "cf9e9814d4a3dc3fc0329c122ab2551da6d86d4f6bece81ff44b37802287d24d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982490, "uuid": "ab66ebdb-c443-452e-9fea-d98c62ddb73e", "value": "T14BD2D1B0A7605AB69F301437FC3E454EABB2977487E2246020A473B8F1DE41BE6955", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982490, "uuid": "7443c10b-dabb-4dd0-b6cf-b889a4f267f9", "value": "768:thdGPVZ0Y5WmXS4PAAwibwd7ix3T2AFMRvm59xzuDsYs3Uozm:tPGPVZ0Zmi8wcwIx36AFMRvS9wwNzm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744982490, "uuid": "03fa209d-f5bb-4dc0-8c11-34cd1ca2c9d2", "value": 29656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982490, "uuid": "1e5d547b-8aba-4488-8066-3161006b9d0a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e838041-1c58-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744982497, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982497, "uuid": "f15bbb32-00f8-456a-8add-06b499a64d8a", "comment": "Malware payload (Mirai)", "value": "35045e637cea9796756bcb8786d0d8a3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982497, "uuid": "db9b0a37-d994-48f5-8bd1-14e6624b7d5b", "comment": "Malware payload (Mirai)", "value": "0f0f66cf3c775528ebab8184f17e54a702ab09f0fd309b86f469c6098d5a2e35", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982497, "uuid": "8cc8c0c7-40f5-4ddb-92b6-d9c1740ed9b2", "value": "T1A9734B32BA321D27C0D5647A61F74B65F2F247CA25A8851B3DB10E9EBF256403603E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982497, "uuid": "18c13985-5f2e-4d04-b75c-5c17ac86f3a0", "value": "1536:i7mOwaV07axL5s6JbcbtTty/qwYk5fmbgD4XtzhlSsW:i7p5cwHYUSJGsW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744982497, "uuid": "79b58540-774f-418a-94e8-7a2ed837bb1b", "value": 75560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982497, "uuid": "5e3217ac-34dc-4421-a0ec-676913a9accb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7809f569-1c58-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744982674, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982674, "uuid": "13adf533-91d1-4088-a844-af629eadae67", "comment": "Malware payload (Mirai)", "value": "cb8a2c42b15873a9efd17e48d7ea344d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982674, "uuid": "c1d1fcbe-272e-4abf-9d7a-9cfddb073256", "comment": "Malware payload (Mirai)", "value": "0b9646f09f9e947bce3353460c3b35fe0659182ca92eefcf6b2e5beaacccf65f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982674, "uuid": "bfa1f6a8-2c1d-4b0e-a06f-2e8a4eacae71", "value": "T1E6E2D0DDE5E02C5ACEED6C7A509F26B19A26728132CB9FCD17208958A721CAF70445", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982674, "uuid": "4e57f8a7-15ac-4a8f-bb37-e5bfc95c61b9", "value": "768:LBzerO/NfLlPGxfMTnyyGB7tRHnaZ62WU:NqmBNGxfM+B7Tbw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744982674, "uuid": "83c94b34-d2c0-471d-a9e4-2ca9594f856e", "value": 31756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982674, "uuid": "8e83e57a-86ec-4452-9212-a46c92c99bc0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1a9ccd8-1c58-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744982851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982851, "uuid": "542e93eb-e87d-481e-9a0b-2cd164549f3e", "comment": "Malware payload (Mirai)", "value": "df08db13702a721eaf80bd097eeb213a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982851, "uuid": "ba1a9fdf-f4c5-4da6-9dcb-35a0ec013e78", "comment": "Malware payload (Mirai)", "value": "901aadcc6bf83fb070d31740d3c2473da6479744cca3a401b054b1f632241441", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982851, "uuid": "e71b4e20-dee7-41ca-a53b-6b766fa7fd5f", "value": "T1E472C076738C7E71C6644879FC19C24225544BF8C9F237352A0D4A28EF9328DA3B46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982851, "uuid": "238a5cf7-5ca7-4300-a20d-b25060e39a1c", "value": "384:wrcG0+a/lOIMeLhBTwjIVRJm0E0DVchymdGUop5hIt5Vd:wrcL+aAIDLhBTXRnLGs3Uozaf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744982851, "uuid": "90252f12-a9ef-4090-b8b6-43aee01efc6b", "value": 17452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982851, "uuid": "44418d07-3b5f-4cc9-b7cf-fc23f657b2c4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec06a1de-1c58-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744982869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982869, "uuid": "45f121a9-1fe8-4c3f-a58e-bde50f9e83ea", "comment": "Malware payload (Mirai)", "value": "e86ea8ede9c7697f3fabb5a5e9484b56", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982869, "uuid": "209ae2a4-4853-465e-8764-72da9beb6c92", "comment": "Malware payload (Mirai)", "value": "b1821bff754a6317a0cac202fcefc019bc9b6bda611097dc95e006bad4cc1ae2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982869, "uuid": "ecfd36a6-c16b-47ad-8f20-dd185c22cf44", "value": "T19B63299AF801D9BDF80FD6BA8017490AB930A3D102831B376767BDA3BD731A55817E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982869, "uuid": "8045ff6b-cbfa-401b-a269-d4dad8336fe0", "value": "1536:Gd6QdCcSStZ1Gc8dbNAPKoesFCkJz7rJh/iP+B:Gd6TcSmZ1GveeCCoriP2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744982869, "uuid": "3fab08b2-3de7-4977-b46c-6c270553134b", "value": 68380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982869, "uuid": "823af838-39b0-43d5-9830-6cabd72febb4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "652391e1-1c59-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "21d34588-3196-4c21-8d70-9f502e73a29a", "comment": "Malware payload (Mirai)", "value": "92c72d31c5d6a944e3cbc0460df06d92", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "ad98d76d-8cb8-4366-b508-f7bb5f3c3c6c", "comment": "Malware payload (Mirai)", "value": "383b604a4be14bfaaf3aac764b8b70cc5e355f26f39063b687888123caaf03cc", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "e08b9182-7890-42d2-b6ee-728d3ee4b7b9", "value": "T18F11D6DF40A88C27E4819DFFB6D38954E5CDC5D92AC5CE45646E013AB5CCA0C3851F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "c844a8a8-dd23-49a1-afc1-1c0bd35d01be", "value": "12:3rWKIw+u5ZMoOF7+MB05DZDUDNkBRCjRDNkB3OpNDNkBwyTyygDNkBa:yRk5zOt+MB0NZykBkkBEkBkkBa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983072, "uuid": "a8f4172e-5f31-48c1-bb7e-3420bc9063ec", "value": 971, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "026bb4a9-0c81-42ff-b890-d5fda231d1b2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d36d1f53-0d59-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "d87973c1-4273-45aa-b0e9-3e8e4cb646ed", "comment": "Malware payload (Mirai)", "value": "ecf5c42e83916d21ea1babde89ba9ed4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "a074942a-c6fb-49a5-a8c1-878e9684d25a", "comment": "Malware payload (Mirai)", "value": "85d832b76ffa7623c5d14c0010db35fc9ea43aabd189731671c04ac5f3fb5cf2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "d2e49d3b-ccaa-47bf-9e72-e7cf304d6cac", "value": "T192633A957C829612C9D43276FA1E42CD372657E8E3EA3213DD221F6477CAC2B0E376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "34dd3f04-3548-450d-8ca0-94a47a676fba", "value": "1536:KVPTKtWP1IXaATJcZ6zsw8Gf3CgYBIQdg8:YnP18RSVsag", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983072, "uuid": "02b8dbd0-62c3-419c-9319-20ab52db26b7", "value": 73312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "6a749794-a7cf-4b95-a039-1a9ea4f4b387", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6529a88a-1c59-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "3ca3085f-c430-427a-b30f-995f6228612b", "comment": "Malware payload (Mirai)", "value": "3be927ea1be3add980cbe8f61730c8cd", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "b0bb748e-8f48-4197-9068-147369c08e02", "comment": "Malware payload (Mirai)", "value": "26fe0cb3393d7e8d61f67419ec112b5b8ea9d57e31c2684fa71ac4766ef37069", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "df74c939-f124-401f-8acd-3c02ee59fa7a", "value": "T1A221E6DF00AC8827E480CDFF76D39854A6CD81DD2AD9CE4A646E053AB5CCA0C3D51F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "551e25e7-9d53-4bf1-8c14-bbefec474f4b", "value": "24:yRk5zOt+MB02ky/JmkyAkykkybZykgkkgi6jn:4k5CEA02kyYkyAkykkybZykgkkgzj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983072, "uuid": "d813ea51-850e-4d9a-88be-aa624ab956cf", "value": 1298, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "70cfcce8-9f23-4c56-911a-b5e38d30104c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "653675b4-1c59-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "78a45a5f-38b1-41dd-b65d-16514e75ad94", "comment": "Malware payload (Mirai)", "value": "23811132db82a65e27d173a256ed6adc", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "33c310e0-f546-4a3f-a29f-bbdbff4e6e52", "comment": "Malware payload (Mirai)", "value": "4b582e448c2e41446fc79128e875cb0863ed96351a3c9f72ccf21cf7e17aaffa", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "b2570163-5a52-47b5-8a0e-ba22a73f3048", "value": "T149D012DD006C4827B011EEFFF6D3859985C5D5D82DD58E01746E1236F84D54D3950E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "9ded3800-2599-4ea8-89ca-db1f9ef58c75", "value": "6:ebgfr3w5/KjLNFlk7dNMokevLNFSdk7dNMokewFhFF1:3rWK/NLkxNJ5sdkxN2FhF3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983072, "uuid": "0c9f7b89-50d1-4ca2-a4c2-b70834167f97", "value": 280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "3c498737-e7ed-4e31-853a-6b173097ae5d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "001ee41e-f682-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "368b3042-c2fb-41b9-9e08-64f6ad2c600a", "comment": "Malware payload (Mirai)", "value": "34248aab74a49de303e91f88a294d7b0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "2bf86a42-23b9-4870-8249-c93c0220000e", "comment": "Malware payload (Mirai)", "value": "91dac5b8bcce471e2aa5ff7761357b7b48a6b05c9095312cd15ad7333c5a8b01", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "9f223fc9-fc58-4292-8191-28935ddf9127", "value": "T149D32B8BFC0A0E89F06ECFF0866D83D73D1116EB62B69D35969C4DD97B1B2680D874", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "8cc426e5-ef67-4053-bfd7-0857e8b68632", "value": "1536:U5GhhZfFjiKd38Q28h08Rzb0wLy66Fzc/9udSZptEeCqEJmcCI9rwcA30w8IaUg2:U5Cik35D9uKHEehqrc0xbUJqF+cNq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983072, "uuid": "cd383fa7-48c2-4976-833d-16b354762fad", "value": 136412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "b22de0ae-1f25-4090-9268-961321f7765e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2407770f-ece8-11ef-b199-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744983072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "57cb4021-432c-4597-bdfb-5159304729cd", "comment": "Malware payload (Gafgyt)", "value": "a0bde997d90acf2dba1631325ab3a04e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "e971d19c-6b32-4a7c-bcf4-c89d39817adf", "comment": "Malware payload (Gafgyt)", "value": "7c2198f1d618c12cd7c30328f2c0821d1b0c948adba0b437c529a8272c8d612c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "b4324fb9-9a23-4af4-ae34-fa87d815504c", "value": "T11324B6C79952C566E6C7C933AD3D378C3E18C3ABC7C97342E510AB1B2795C3B16A96", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "20233910-5c79-4138-b26f-b35e3aee6efa", "value": "3072:Pkw9O5j2QFWyJxdN1G0CI2GySO8EZbad8K8HUoMEVAZx:F+WIrCIbLO8EZbI8HUoMEVAZx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983072, "uuid": "af5f7d87-28a4-4c6f-bb8e-ccbed93b2d29", "value": 209900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "35eb20a7-badb-4bb0-be3d-c45cb18d2c8b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6557bf4c-1c59-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "18fa2841-100e-4b6a-82ba-4ce41f627cb0", "comment": "Malware payload (Mirai)", "value": "77fa7ff8d600cc292c60080bdd9a7711", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "be6d2ad4-3bfe-41e7-9757-34007b649639", "comment": "Malware payload (Mirai)", "value": "122cbe427c8dc2cd07886c06a56bdd0fd83a95e86cb7bd00afdadb80b5c37d1e", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "5492b182-112c-4f6e-b331-c7323c0eeb4d", "value": "T12801F7CE01A88D77A8818DFF72925955A9CAC4CA1BC9CE85209E003AB5CCD4C74A2E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "6155327c-5120-4561-af42-40455811ccef", "value": "12:3rWKIw+u5ZMoOF7+MB05vOpNDNkQNwyTyygDNkQN8Tvn:yRk5zOt+MB02kAkkA8jn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983072, "uuid": "78ce9e37-a023-49de-be75-a614833b0832", "value": 692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "e813df5e-7efd-46a1-a622-70d0b77e4ed9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6557fd2d-1c59-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "cdd23c79-62c4-4911-acbb-8e4401eb5505", "comment": "Malware payload (Mirai)", "value": "3d92debd50baab615109a10a6105d8c9", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "2807bcf8-4728-4263-bf78-36febfd44672", "comment": "Malware payload (Mirai)", "value": "3674c3bac2457a7c6f961fdec677844e2567c2554030e2574a9c79d26bd47a37", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "47c01b24-bb5b-411a-9731-04bd30697cd2", "value": "T1E8110FCF02AC4867E4809DEE71938964A6DEC5DD19CD8E86206E0537B5CCE0C3C11F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "e367d141-e9c2-4a37-999d-5e1fd84b0fbb", "value": "24:yRk5zOt+MB0pau5ulk2Cupcupmk2Cubufk2CuYuSk28jn:4k5CEA0pgk20k2gk2Ek28j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983072, "uuid": "dd640cf3-1448-48ff-ae1a-d4f0958dbd61", "value": 975, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "6e5a4e3c-cd45-4230-beba-79790dee00eb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "655b4256-1c59-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "1feadcab-2982-4abe-9525-37b47b48f2f2", "comment": "Malware payload (Mirai)", "value": "83f87e1abfc0ce9f34724db3bf2d7e30", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "4ce6a845-7c14-44bc-b1ee-7a8a13d3b6b1", "comment": "Malware payload (Mirai)", "value": "ec316a8c6ef5b9e7fa08757270ba6ef34501d9fc52b79b2f54e72d468611a94f", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "14ffb9f6-0c1b-45e5-99b9-1489c10a25f8", "value": "T1D341B1EF01AC4557E480CDAEB6E38894F5CD85CD28C9CA4E245F0532B9CCA5E3C94F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "2d750da9-84d1-48db-8fee-87c20172cf51", "value": "48:4k5CEA0ZZ2kw4kwj07kwgkwEkwkkwkkw0kw+kwkggkwkkwjZakwOkw8j:tCEA0NIAAUM4o2u48GT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983072, "uuid": "1af4cf79-d3db-4663-9906-f7f701218b9f", "value": 2252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "0ab17c05-c3fc-4fd7-afb5-2bb24d726db6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7624d3a-ecfb-11ef-b199-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744983072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "de508dfd-b3d5-4b39-a314-52bcd8533ec0", "comment": "Malware payload (Gafgyt)", "value": "f1aca270b9f08c6f2658e9e4ce9ecf40", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "dfb8a44b-7b04-4a50-8d89-d2dce8dd5ace", "comment": "Malware payload (Gafgyt)", "value": "14f18f18dcf6196d11f6d2be53bf18291d8c60ab174f58068444766dbac34d75", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "f4ba6bf2-4989-458d-8e92-0b10611fbed4", "value": "T13D24E6C3F619D562C248DC326B3ABB443F16856BDDC2E301E000E68F779B66B29B85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "f86a6c65-e7e2-41f2-864b-322049090005", "value": "3072:pNcCCZF7E+vojwq8I2C3ur8PQxZvad8pn4:j+7EYoQI2drVxZvg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983072, "uuid": "d0419794-3a5f-4eaf-a218-016acc2c1cdb", "value": 222276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "0b5ac038-a2fe-4617-820b-e843a5d1d149", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbb76696-0d58-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "17c49714-b083-482a-ac68-e93e489382a0", "comment": "Malware payload (Mirai)", "value": "020ec5fdb96035780a652e653c75739f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "68954eb1-0e89-44e7-8793-ed022404a905", "comment": "Malware payload (Mirai)", "value": "93a4198742b6449b5e2050a813184f507ecc1ede5c1072f49fda01ea818c91a6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "77909c1f-61f9-4840-80d3-a9f88ab94bd7", "value": "T1FEB34C92BF438DBEF96887B44EB78E74A39455AB15B582D3C33D7D094A702C04D26E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "cf6f5991-30fd-43ae-af87-d2cf0181baaf", "value": "1536:aIS9mKiCYu7dzFfBexhJYuK1vtTowyOq8ubNQZ31bShfd41e+a5a4qyWr5itu7y9:SiCYu71bQJMnnAdkvhoAU0Fg4O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983072, "uuid": "9d6f9d37-82e0-4d8b-9022-40a6ac6a66e6", "value": 107440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "e208df2d-75a1-4a1d-bc83-d76c20f23d22", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0068e6e1-0d58-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "2ef6f9ac-754b-4bbf-bce7-886813804450", "comment": "Malware payload (Mirai)", "value": "e7b8f18881ac646e3db59943e7f1f164", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "3dbea754-300f-4b24-a110-820cdd19db0e", "comment": "Malware payload (Mirai)", "value": "a68d8044a023c06d756e97db06036544d1c9c650d0531574a8b2f6741b133350", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "c7bffd8c-a5c4-4aa5-81b1-e7e089bec563", "value": "T114835C80BA4CAC71C09C2C3767BBC74A375709D46E97E251C405E6CEBF8B684AD244", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "628d6143-ede6-49e4-a03e-01eb199e0a63", "value": "1536:SlFtYh0L4irQm4Fv2RrP5icFr/k3GlCMNKnyPHeiZG5OW+xrV6F/u6H:yPhL4irFbRr/YaOnyfjWCr6u6H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983072, "uuid": "d32e5bec-00b2-4e18-b8ee-2b041c1097d3", "value": 83904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "5a88b618-1326-4e3d-9252-c55ba7ca7818", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b657bd7a-ecea-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "4e5dc94a-e491-4e5d-a53e-e979d2147258", "comment": "Malware payload (Mirai)", "value": "7321bcec20755a3d137173d8dd4a11f1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "00f28b02-4b31-4a4a-91b6-8d0375c0e2d0", "comment": "Malware payload (Mirai)", "value": "67d226666a93862203e77c45137fd83c0e5e1119af158b013117495b63e03454", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "d2a65cc4-755e-436d-a90e-c81f7aab57e7", "value": "T115835A857D818622C9E0327BFA1F52CD336557E8E2EB72178D221F6177CA92B0D7B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "5c95d440-ecb0-4765-b074-8414420a01c0", "value": "1536:UM1yJXMYXoRAWoJ5ygJAI57utMtcXKEC5n2oeNPLXAoPCGvQkZKl:UOy0RAsSWXI2bPrAo1ZZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983072, "uuid": "9c2001c1-2eb4-43e9-a36f-38447215e4b1", "value": 87836, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983072, "uuid": "db212e55-1aec-4f55-b1e2-d8633435a132", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41a4b5c0-ed02-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "4c6c144a-9441-414f-a514-abef4f34f211", "comment": "Malware payload (Mirai)", "value": "41ed814b686f25a3d8bc1820762d5515", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "beaf5a65-6fd4-4269-9041-6c9baac06dbf", "comment": "Malware payload (Mirai)", "value": "a1a6926b93bf296992cb31de76246f26d75870245f095e6289b83d5d60c4ef48", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "f99f1b57-2272-4301-8e8f-be19e77e638c", "value": "T1BC835A857D818622C9D1327BFA1E528C332567E8E2EB72178D221F6577CAC2F0D7B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "0dc92fd5-c34f-4465-bfac-7b025346ab64", "value": "1536:JRhEFmO8NyFj/j1YkNfE1yWekQHZfK42vHXyrPj+d1EkZK:JRaFmXMFjb1YdLKfyHWL+3dZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "db262840-35e4-4d2f-92ac-fa7dd91c984c", "value": 87980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "72c33a11-d5c4-4bef-9fd2-01a8e019eb01", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c40b470-ecf2-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "544b4b90-7d74-4303-a82e-23926f92fc16", "comment": "Malware payload (Mirai)", "value": "34102fc22f30394e70d30fca53ced335", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "95ea6735-24bf-4616-853a-bba2209d3af6", "comment": "Malware payload (Mirai)", "value": "dab7fc4d48eb479c2c58e1fbd10dcec31b8ace12091be9b81eac08dc085e12fe", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "4c932a20-2976-4568-a18e-00606526a85e", "value": "T19EC3AF87F74B5890C82102F11BC75BED2FA332115E5F84F66C1DA63B5A7A4CF4A0A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "074d614f-0f59-49c0-849a-513cfb9e45ba", "value": "1536:34BiRGZmwmFLMtYf4k7bHrDl+N7RsWi7AkKdU+KFut4bNNgI/LW:KKGZ/aLKY9rDl+tufcksKFut4bNNgIq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "100783eb-9b62-4d41-a91f-19802fce28b5", "value": 124100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "5144013b-3ae9-4f8c-b02b-8e6bcab40ae9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "224a5c1e-1362-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "46e0d4a9-4d62-421e-99e1-5d2f676acb6b", "comment": "Malware payload (Mirai)", "value": "2b1c2001798fb2ad1cd0c6657c6e316e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "35c14c31-5170-4c80-ac7b-b2bb59bb4a35", "comment": "Malware payload (Mirai)", "value": "81d240a5d99bc948a58d3d7c746b39c4f36848bb4a6c488fff2558a9ad17c1ae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "6eb27b0b-1b4c-4ea0-88cf-91b892b7ea82", "value": "T167833A4ABD829B61C9D52279FA1E518E33131778D3EF72128E201F2477CE96B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "55a6db97-a66a-47f4-af08-edf58e0e679e", "value": "1536:MlnybjYPYLDsbow5XDwiYwowNTmRnMrlLfRZQsyJbMM1i4Y/OJf9:54PYLbw5XDhrvmsdfR6Y/OJf9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "823a41c2-5f9e-4551-908d-645bc3482056", "value": 84300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "e8b3b3b6-5388-4d28-b340-f906b9d4db7c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14ed92aa-0d59-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "f3881f1c-ed92-484b-89d2-b943bf76e332", "comment": "Malware payload (Mirai)", "value": "56204f2894d068b24a0aceb868f977e9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "4430b049-849b-4ab3-b5c8-7ad6aeb1308c", "comment": "Malware payload (Mirai)", "value": "45fe3faa7904cacf5f7a3d63385aebad6890f8913b8dabe91f29956be44c3e99", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "2c8a5b77-a762-4a47-9c3f-b1776c19cac5", "value": "T1C7933909BD819B11D4E536BAFA1E418933135BACE3EE72128D211F2577CAE1B0F775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "d7bc790a-b1b0-414b-97be-4ad2a3a8aaff", "value": "1536:nJnviZA2YerD4ZfQ93MxocFCUO3eynJ4wgyNPpxRdI635pf9lgBiLdT+bN/c:9J2YeofQ93M6SwtnNPpxRdI63U4dTgNE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "837c397f-a203-4091-8776-087458ee6e15", "value": 97240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "007a7c49-4512-477f-a3da-49b8e74df4d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf6a2b84-ecee-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "aacf2054-b0bf-4842-a59e-4bdcc309d1e9", "comment": "Malware payload (Mirai)", "value": "f042e1ee916f151908cad501a32883bd", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "bf7937ab-4682-478a-afc0-5d269cb1053b", "comment": "Malware payload (Mirai)", "value": "d822048a8eb925046edc4e5e72c41d82c56093dd87bb22f49685326d85986769", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "66f3edcf-c842-4f88-8e34-adc7ff5c2620", "value": "T162B34A46BD819B21D4D536BAFE5F028D331B5BE8E3EA71129D100B2567CAD2B0F776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "d5700c91-9e5c-4e85-9194-6e3763c03600", "value": "3072:jkNplkS1Ol6zd7lB9o/8rUgBTlbP6rZCy/Z:+lkS7aSBTlbPoZXZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "80485174-8275-44da-b2c8-1926ac18d72c", "value": 111964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "770b1228-d2ec-43c7-87fb-d748d6b988f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7abf62a-ed02-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "30c88acd-355e-4c88-865b-175367dcf977", "comment": "Malware payload (Mirai)", "value": "9e87e6552b22865382efe2097dd065fa", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "14602778-8607-4695-9d97-9867c2f65d79", "comment": "Malware payload (Mirai)", "value": "d1a427ef9e41471f5fd77327509ade82a1baed34b58a01dd41ed01d815a9d7d6", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "09bff2b0-ebc6-4050-9797-7ff76836d7c5", "value": "T16A83C61E6E158FACF7A9C63107B79E21974D37C727E1CA41E16CEA001E7024E685FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "dbb03f69-bfeb-4c9c-b265-af7c636dc3ab", "value": "1536:3Hd7wZlW8kaMdUnKfcissPtBewrpDUjavP5mapHHaSUdl2u/n1Dxh5twT:t9UStfcissPXeG5ma16Sclh7hYT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "714a9cb6-c00e-44b3-bee6-7cdb23402962", "value": 88192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "65546ccb-7d61-4c5b-ac0c-25ec17e4090e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e392e7a-0d59-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "b3c78373-343b-45e4-88b3-4e86f4f2933b", "comment": "Malware payload (Mirai)", "value": "84b72128b0ca010e10a2caa667e54e1e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "ca468429-b0b6-4b5d-84cd-01d7dabd68d2", "comment": "Malware payload (Mirai)", "value": "26ee6ec23d4fb677bbb80c94f9e4d58e37020b2ba27ceb77747c890bf226ee61", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "d654ef13-3b7a-4535-9059-d13375098b83", "value": "T160636C42B7580E47E1B75AB42D3F27E0C3EEE5E420B5E64D364FA78A81B1D711086E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "87476e9c-547c-46f3-84e2-73c4df4a6dd4", "value": "768:LKYdLzCwokMKi2KIEOfuY5K6TPEQne+vxfJ1WLSY8ZZ415BRIpSopWnYSA48Ozdl:hdLzCOM12RfuGzEQeeWLSYHzhYSAqhmQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "daa30171-4fd8-4c6c-a05f-4b40b3129c7c", "value": 72688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "02bb0e93-6091-4e0e-84e4-e1ce1c6d3d1f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00410f0e-135d-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "283733a5-e437-4c2c-be80-30865fc93c4e", "comment": "Malware payload (Mirai)", "value": "730ce80d19d82ac3f75903492c12b8f2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "ddbebabc-2d50-4bad-b1dd-226d0e89468f", "comment": "Malware payload (Mirai)", "value": "9cae737fed6231d3808a5706d169a0ed1128ca2c8a972fb78fdbe855b2cf926b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "c4804644-b708-49d9-9b04-9abbb7b659a0", "value": "T128C3BE83B74B2551C82506F11BC71BED2E6372269E2FD8FB2C1D623B9A760DF45097", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "7bfce91e-ae64-442a-a562-c6481d1d9667", "value": "1536:jKjrl4tdFDwrTm0/QITb+VGpDIjuXlx4JbneYx/+6JDg6d/LWFG:krutdNCTmOwVPADkbVxW6JDg6dq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "837da191-ea5a-4d42-aaf8-6ae4b9efdf3a", "value": 125072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "dfe36529-9966-4247-b615-ce4e8b3afd9c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0cbabba9-efe9-11ef-b8ac-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "05a45492-3b77-44db-b889-6ae668b1d752", "comment": "Malware payload (Mirai)", "value": "14224151bc0539bfeaf724349be0860b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "d79b144a-2ce3-4354-98b2-fc72c063b438", "comment": "Malware payload (Mirai)", "value": "ae3d740fc5a9fac12d1ef7c9204a0e25574d095a803baa988e093b8f577fb3bc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "3d32c118-ff9c-4b13-9f0c-69c7dd97fe6d", "value": "T1813419C7A901C609D5C7D876BD3E36883F17C76BC3C57302D690AB1727A693B09BA6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "307df7c6-e7a2-4077-a083-45bd7107086c", "value": "3072:ZpIsdBOFU/qKQtNZVoZMCExlOodZPrl5CaYQZPad8bv:vBOtN+EvtdZPrnCGZPl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "2cbc84e6-4610-4a5c-acc1-a8a4bb70adad", "value": 230816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "a7118eb6-8d44-435d-9f57-53ac4095b949", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d041df4f-ece5-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "1336a359-35d2-4b69-946a-798b9458eabb", "comment": "Malware payload (Mirai)", "value": "0c09d2f51a060fa5c5dba2d7d4b045d0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "69be2c62-898d-4f8d-96ec-77d3754a96de", "comment": "Malware payload (Mirai)", "value": "2f8911081fac2c795de75fe06ddbb0fffe8c008b4988ce54dab458271380ed33", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "222aeeb5-eb08-4361-a381-ffa52501769c", "value": "T1B7A36C80BA145C31E05C2C3663BBD34A3B571AE65993F101D844E7CFBB8B6C06EA45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "5142c8fe-3745-4c87-8fe1-3e14592bce5a", "value": "1536:QDSb5nXyh6LdYrVVeHj1ikCF+YMaUhqTql1kMuud4X6C/LUuxKmfy5U4mGP+y2PJ:QGb5XyQYTez5selm8de9Ce4BPEhZ9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "e30a41f4-b9aa-47d4-9883-210c4a7d6e97", "value": 97784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "721e3971-697e-4871-b3d2-a6165523a1b3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17ef35eb-ece9-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "e3e8cf88-eb76-4904-b858-01f072d447b4", "comment": "Malware payload (Mirai)", "value": "7857c0f728fa3a1db2d6fcd9783d2e39", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "20ced94f-d4b2-4fd7-b365-bb62c6f94039", "comment": "Malware payload (Mirai)", "value": "34bf22669c899430ece4cf3272594d75c29d8bdb1ebb26b2bf0f997f9980fdbf", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "974a71db-4621-41d2-8273-1ba4e37b32a7", "value": "T12224D6C3A95AC512C6C7E933FD3D36992F20D36BC3C5730AE5109B9B2B5683B15A97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "a7a7fd22-373e-4224-b6cd-048a9ce68ffe", "value": "3072:XFoyNwtJ/bIRJa8wb1iHqIrpi/NOThZbad8e:+Q+sRJzRqIVUOThZb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "f4d158a4-0dd4-4d28-b61d-755a75985631", "value": 209852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "c5631951-745e-4f02-951a-598effb5622d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c487d48-ecf0-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "89dc03fb-bc21-48d5-abba-07d0730d0037", "comment": "Malware payload (Mirai)", "value": "2492f925eb781e96262acd2f20198d95", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "138e4629-2922-4981-8abb-55ba8229f71c", "comment": "Malware payload (Mirai)", "value": "77b63db3ecf5222275cc98a68606b7d5313528e695b193257a601b7d30d837ba", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "d4900afa-3532-43a1-b6fd-9b6ad6a3c08a", "value": "T190836C45DC374B10E1E607F06FA98B03AAD03B6A26D76B44C74CB638F61D4E4A1C1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "47a85189-38fc-4e7f-bf03-3f88531df72e", "value": "1536:29Rf+Jzl9/Jm1bcYVxNiNtf234CYzhxYt5gQbLHM5caZV+P5Gacut+MF8:29RixAAY0N523NY9w+7GhGstf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "d19b6cfd-9ba7-496b-922a-010da70011ba", "value": 82812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "ff24e345-70d2-400b-bf10-6549bb2eb343", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2eb74aa9-0d58-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "67a24d12-82e4-42e3-b98a-9940b8f764d9", "comment": "Malware payload (Mirai)", "value": "1c1f0c8c5e33b81feee0ebd4fe76d4b2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "7fc5e0b0-1828-41e4-9d9b-1d27756da47b", "comment": "Malware payload (Mirai)", "value": "f531668f5a1fef9225d0870f0ce31b2faca6b2736f43a46de78033bb7f8ea441", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "d2bce564-f0ea-43df-aed7-4e9842e5a437", "value": "T16963AE33D9586F59D50446B5B4B08F3D9B13B417C2072FBA6A9ACA29520BECCF6493", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "eae7e0e4-bd65-48b5-90d2-9419f93dd893", "value": "1536:i+AGN9nUbob8GoSI+/KceGY1hYh5kCEc:i+XN9Ubob8dSRicBY185k6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "effff84a-3faf-4ba9-9130-2701e33feed3", "value": 72592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "c39f9932-beba-435e-afc2-aa3ada394188", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ffceff0-ece9-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "c66e1b94-ea3a-4b4b-8a9f-85c38f0ae091", "comment": "Malware payload (Mirai)", "value": "9c08cf774c8899873bad9c397e06ca00", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "d032788a-e3f6-475f-a147-81c2b7b1bee4", "comment": "Malware payload (Mirai)", "value": "ac2d50248dc2a39a5c1ffaceaa71fc3914526beb7ff7c8e334855258b4fab2bd", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "cf10831e-8c85-4e32-9980-781f6c3ac358", "value": "T1D0836C21AA7A1E27C0C0B57A21F7436AF2F1574918A8CA1F7D610E9EFF6556032137", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "56917880-05d7-4538-befd-874dd1982781", "value": "1536:HcV6YhQAeimKo693TvmqlMfEQtccFAEW2ttgDAL:H2SAeQo69DL5Wa24DAL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "edd2fc7d-566f-4159-ab35-781c58c3b7d4", "value": 84236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "9a8c328f-8d4a-4e5f-8d5a-7a69824cf93c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65d96938-1c59-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "56dc0572-3bf5-4c13-ab34-1f09d0cba5c8", "comment": "Malware payload (Mirai)", "value": "b8897550552d88a570593d9171cb2dad", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "f3f52a24-feeb-47a7-8def-fd39992de2d7", "comment": "Malware payload (Mirai)", "value": "41dbbe9502c141bd9575f5d1a8736f61fb5d647f64a8ef9c15caa81f35dc345e", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "945be262-1e10-4518-860b-f1143473c095", "value": "T14D41C4EF01AC4517E880CDAEB7D38894E5CD85CD28C9CA4E646F0532B9CC95E3C54F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "74859c42-b1a7-4952-82c6-5c3f9785bf10", "value": "48:4k5CEA0907k1gk1Ek1kk1PZ2k14k1kk10k1+k1kggk1kk1jZak1Ok18j:tCEA0RxtFtxFVLDFJ7q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "a8970573-98df-458f-8665-3cc3a885f8e3", "value": 2253, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "0551208b-3e2e-4289-82c1-ee2608dada12", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba7b1edf-0d57-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "8a4e24be-c609-4265-8b56-9ef780b473bd", "comment": "Malware payload (Mirai)", "value": "6df713c903abf9f7e562850cc958b2d2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "9613f5bc-1899-41d4-ab05-a5e40f9c4bcf", "comment": "Malware payload (Mirai)", "value": "b3f7493bbb0e9094f734c7fe53af0b2e311342652ed0d2e3acdae5d96113a54e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "227a7cbb-0531-4870-84de-feb7afcb3ee8", "value": "T1B3937C55DC374B21C1F607F06FA98B0795D06B6A32D76B04C64CB638F64D4E862C2B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "f3a74026-76e6-4c14-bc5c-51adb35b35f6", "value": "1536:jYSvxZEzA7H0sj/+vBUQlrvDPfg0P75zYpjpBS15ztH7w4eYZTwR8MvWj+IQWtif:jfwSpjWvJPYo5zYpjpBS1RFeUspWjHDA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "18fac5fb-291d-4093-9644-1c2167c649c9", "value": 96072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "8000e019-3134-467e-aa08-1e70c17e1ec7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42726108-ecf4-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "e1220a4a-26fc-46c6-a96e-433ecb7dcfe9", "comment": "Malware payload (Mirai)", "value": "6c96cc5127b8ab97cd55f1658e3eeb33", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "a09ad5a1-26c7-404c-9f4c-b2affe72f5f1", "comment": "Malware payload (Mirai)", "value": "34a82b5e1ed69e37297a81462f93764622b69e53a49f0987bce2da4b8aac705a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "8bf6e872-fa88-4ac5-9b30-c96dfa24bf7a", "value": "T159636C8273680C57D1A65EB0393F27E0C3EEF6A024B0B749651FAF4A8635D754086E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "edff6795-c455-4f67-b510-780e4cf5f378", "value": "1536:kr3l3w3E3iNgw6mHDAqwYnW2rBfBzjxo3lHuGcuSLNd:kr3l3w3E3OggDd7njJB3xoVu0SLP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "078f5855-4e2c-4d64-b4d0-f08f29e43550", "value": 66960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "730b6081-bd0e-4e28-8098-14b6cbb63e1a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a79e793b-0d57-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "fc33057c-8184-4cfb-b519-68c221ae9718", "comment": "Malware payload (Mirai)", "value": "5d5ea577cffe84e4560d839b2ea2239a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "375bd239-d910-4ad4-989f-4e33f6a4822b", "comment": "Malware payload (Mirai)", "value": "47650b16300b5698b1f3289d208bc70708a0dea56acd38caf5ec9fceee6c68ca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "0e731ca7-f19c-4f42-9982-11ea54cfd4b7", "value": "T1F5A30709BFA10FF7E86FCD3705E92B05258D591A22A97B367974D828F64764F0AC38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "ecb73364-9050-4200-ba74-f0ba8072fc50", "value": "1536:xC3rpWLgGstfyKOE2jlJFDeRovmU/WjddK0S7s/q:EdXxyDjlJFD8KC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "c6b1d16c-cbaf-4913-987d-b63d9e7f4e36", "value": 101840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "54f49103-6ef9-4ef0-be0d-f30bee09a4d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbd9c561-ecfe-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "a30cd121-7e67-4cfc-8356-15d75ae5b787", "comment": "Malware payload (Mirai)", "value": "bab7cb46bc7037308994e9fea6628bd7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "baa24159-4905-4c55-87e0-3063fb32b12f", "comment": "Malware payload (Mirai)", "value": "daeef059a8a2a104ed09173cd2e675b7c3fee8ce835ac342ee82099998ff3299", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "d652dc71-1aab-440a-9d6a-20adc49e7da9", "value": "T18AA35BC1BB438E7EF569CBB98EA25E7533C41A9B24A5C5D7C37D7F050A202805A1AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "f9ba0a2d-9db2-4b1f-a1c6-4590322495db", "value": "1536:7MRg6wZk3X/rXjIuyX035TlhR3q8mi2VQwgamRSB/3Hn7WpdJccRv0hs9PdADNm1:TZk3X/rULs5ZvUi21F3bYsadtI4Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "205e85a9-72f3-4c94-a82c-d1456bd9300d", "value": 98936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "507159fd-980b-404b-a86d-291c97cd6a83", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1231233e-ed01-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "5ca95ac4-cb35-4aec-9657-26c7044197f5", "comment": "Malware payload (Mirai)", "value": "54cb3dc5db1ac51a3e512d48d0936c07", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "7e378746-be26-41ab-af38-ec671bd55069", "comment": "Malware payload (Mirai)", "value": "388c12a30dcf683884280955a90a7732849a4fc28b1b1fb051d53d530edcbdf9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "1c18c662-3b09-4025-9785-50c6f5a0a7f3", "value": "T138934C46BD818B21D5D0267AFE1E028D332B57E8E3DF72228D141B2577CB92B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "168c5ff3-5b7f-4e32-aee4-3515c3464b9f", "value": "1536:5xnfgsjO7LC2Scu3slaiUSwYju9DQ5PtvUPTB/ZVneSQ/AEFxbbMdisRniVVEkZK:QsOfCgu8SSVksTqTB/vBQoRniVVdZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "6b73bb2f-3271-4c3e-ae1c-355023f90484", "value": 96632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "f9a280c6-f82f-4177-a459-7a6408ffb56f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82216789-ecf6-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "cae6a6e7-f090-4198-8b70-7ba4ae1a9a31", "comment": "Malware payload (Mirai)", "value": "487dd999e01599f9a14d9083b2983ef8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "80863df7-983d-4f7f-98bb-369f59bc52e2", "comment": "Malware payload (Mirai)", "value": "a44606471a871a2b398aaa0503f50cf102adb5d2a01c79f94a9f2bfe17ed259f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "6bc2a80d-d576-42e5-aba2-d6f8a0d8a513", "value": "T143534AC5B90B81F1D4274A7441ABF6BFCF30E57A5030894EEF98EE39DE7798526042", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "77b66922-c41a-4739-a477-9b817bfdfd8c", "value": "768:Jj3UlOHQ23LTshXAgXggko0K9gnzP998QAehBcnRjlzC02LDfCsGB92XE1inmtCr:l1HQ2bAhQIglDp99VkkoP2XEkm3sU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "b754381d-e0e9-4d24-bb0b-e2499a897ffb", "value": 66212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "22083c65-7a22-48ff-a3b5-323235b97a90", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e50cddc-0d57-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "b9f92a16-37b0-4640-b308-0f6857e3ae9b", "comment": "Malware payload (Mirai)", "value": "b4e0a506bdff3a3fb95aa8abbc82aed9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "d4310d2f-1514-4b57-aee0-bbf0781bf7f4", "comment": "Malware payload (Mirai)", "value": "8ddf987c0024a26b8e40a1e779a5725fd71081e1302c5beb3c119c918214cf81", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "aaed1eba-8c0a-469d-9bef-ff8c1dffa3eb", "value": "T1677329C5B58B80F4D86740B0569BF7BF8B30E33A5021855EDF94EF29D937A46620B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "1ce33aee-92a2-4367-8cce-05a60e500c73", "value": "1536:j7imRbRv0TAgVKhFZMpboVU2tdsB42HK5hZzOkVegl:PiA8xVkaboHnGRDkVegl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "9e20d348-727c-472d-a431-b0f813132cec", "value": 75392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "67c09ef6-7464-416f-b356-82579ebe47f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "faabeae3-ece7-11ef-b199-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "6f2c0def-f811-4465-a330-2f5f35ef3d3e", "comment": "Malware payload (Gafgyt)", "value": "de5916ee947c5fba69e4655e866e65b6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "a71ab26a-68a4-45cf-bdce-8141389c05f7", "comment": "Malware payload (Gafgyt)", "value": "55173c8faa1f6bc92874c55fd280be21f7e581c1076ac50f238ff1c97b9f3a9f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "b9bbdca1-bb51-40f2-a30f-e051662a169f", "value": "T148243BD7A912DA05D9C7D936AD3D3AAC3F11C36BC3C5F301F520AB1B639683B09A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "37191d08-f474-44bb-a394-4fb46baf5ad2", "value": "3072:NyUAxZYvv0pIEmf/4ldmDCzLXnDV9BZPad8:XiYVfIzTnDlZP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "5a9cc71a-1720-442c-9d3a-f9f2d7d3f85b", "value": 218404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "464533f4-6edc-4422-b69e-9a4b72f6f958", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdd9e361-0d57-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "87842a1d-999f-48e7-9661-c76502653ae9", "comment": "Malware payload (Mirai)", "value": "3c765811e1a77761de99f7aa1fa8c7d1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "3d52f9fb-45dd-4f93-babb-f660a59a0bb7", "comment": "Malware payload (Mirai)", "value": "32e021dbb4ea1a7ac3d17e3f2bac4ad28cce791e43f689e6e99c0728b35352d8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "48490006-d27f-4732-95db-b053183d0e9e", "value": "T1FDA3B40E2E158F6CF7A8833407B78A35E34C27D736A5CA85D26DE6101F6424E646FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "dbb981a1-49d1-4867-82fd-5af9a779f877", "value": "1536:Fly5MGnf0Na6zdpB6qEPg8/1uM/OnZ4t/9ka/KMQ9+Wul+an4JeG71H8s0rq:FlyiHzdoPAMmZ499kayMQoWul+fJB71L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983073, "uuid": "71458cce-6e8a-4f38-ae16-7f8c80dbae40", "value": 97744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983073, "uuid": "5969861a-fc5a-44ee-b5d9-5b74743c43e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9797d82-ecf1-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983074, "uuid": "79f1d3c9-2a74-4698-9dcb-d962e031b915", "comment": "Malware payload (Mirai)", "value": "fbad21895af9eb439d58aac92ab0a0b9", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983074, "uuid": "ab3c71f5-7f01-44b6-9c15-36cbdd77b932", "comment": "Malware payload (Mirai)", "value": "62ffefdd46f5f0bd15fd87927fc6a55a17d6477c56f6cc72b42d47b4459759ab", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983074, "uuid": "410693a6-55a0-4159-8ba0-01b24009940a", "value": "T1A193D605BF510FB7E86FCD374AE91B02158D961A22A97F367E34DC18F64B64B09E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983074, "uuid": "e761569d-0003-4d88-8b3a-3274891d3641", "value": "1536:6idLX62Ke17M6j66dbq18uY0ZOYddueWPEgGgwVOPWKwjh7L:6obh7My66dbqioOYSHvm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983074, "uuid": "c45e18e8-60e8-485f-905c-12e804c78bbd", "value": 92288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983074, "uuid": "eadd6422-1504-4d6c-b1ca-d8f0d8bf91c8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35b7de20-0d59-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983074, "uuid": "b29a1473-f7b4-46a9-81a6-e32cb54fd807", "comment": "Malware payload (Mirai)", "value": "d1e18dfe6eb7a748a713caf868205343", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983074, "uuid": "c95d469e-6089-443f-af19-467b52e5b438", "comment": "Malware payload (Mirai)", "value": "8310dbd644aa5bda94979f409dac8e8ca8ae8f051ca6cc830c870560325d3bd7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983074, "uuid": "714faa2f-3857-4be4-8592-6f9d65a2aa77", "value": "T1FF734A957C828612C9D43776FA5E42CD372247E8E3EA32139D225F6077CBD2A0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983074, "uuid": "5535fce7-c8ea-40ab-ab81-ef7b59fe7727", "value": "1536:AhMRSMz6FLINQl0SSezwRcxgTrVIyDixyCEd41wp:A4CkuGUzCc6dzzp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983074, "uuid": "bf601d2e-45fb-4f86-a2c2-327a54dc2865", "value": 75624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983074, "uuid": "d3425c13-536a-4ffd-a8fb-194826eb436d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66ca17a8-1c59-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983075, "uuid": "bdc1287b-523d-4681-acd0-91876a254563", "comment": "Malware payload (Mirai)", "value": "84c3b4a3d08a035a86de36723daad868", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983075, "uuid": "5b702714-fe17-4295-aa31-5ab66673f37a", "comment": "Malware payload (Mirai)", "value": "125f8be45013606a9968b74e3f56767d5f471fc2650d00ab4daffab824afac98", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983075, "uuid": "f7a71501-4def-4bbf-8b4b-ba27c85f3bcd", "value": "T13CE065EF00684826F040EDFFB6C3845491C996A82ED48E09586E0232B98CA0C3D00F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983075, "uuid": "93a8d73e-16c6-4264-89a0-029d9ba27412", "value": "6:ebgfr3w5/KjMXuZDEHDNk7dNMoke4jXAUDEAxHDNk7dNMokewFhoJfCJv:3rWKlZDUDNkxNRCjRDNkxN2FhoAh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983075, "uuid": "cc607233-02f7-4c3c-a2e4-5de2e3068ed5", "value": 390, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983075, "uuid": "c98acb2d-88d2-422d-8b50-4492050eff65", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c67e39eb-1361-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983075, "uuid": "903882e1-043e-4f16-a924-1d0c3c7e39fd", "comment": "Malware payload (Mirai)", "value": "3aef01e5457d74163730d4de9b770ede", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983075, "uuid": "7dac0334-2457-49f5-92b0-9f831a9249b3", "comment": "Malware payload (Mirai)", "value": "7b7e46ba9db73dcb4c80e134cdff51f4da834f40459012dd61d12eddf2694e98", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983075, "uuid": "414c882a-01bb-4b58-90df-233d4c7b0e29", "value": "T1BE935C31AA7A2F2BC0D0A17A61F74766F2F507491478CA1F7D610E9EAF2996032073", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983075, "uuid": "80f0e98f-041a-404e-9eb2-65fb0e775b7f", "value": "1536:RqSXd9wJootEq9zHN2DImW/Q837XyVO2WotxRKX1UCj:RDdOJoQ9prkCyuoIX1h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983075, "uuid": "048af254-b326-4601-a71b-326399c88155", "value": 92364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983075, "uuid": "dfad27ff-0e02-4a55-bb0f-4ca98901dc44", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7dff186-ecf0-11ef-b199-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744983075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983075, "uuid": "ac2284e5-26c6-49ca-a97b-019b4277ea63", "comment": "Malware payload (Gafgyt)", "value": "605f61262991934bcccf7023c58565f1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983075, "uuid": "80b1bf23-b5e3-4ab7-babf-40025412adcf", "comment": "Malware payload (Gafgyt)", "value": "eb7bd4e06be210a01b24de7683bc769b46699e685734fb19131b194dbafa22d7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983075, "uuid": "9a0e92d6-1e09-402a-927b-4f7373404a34", "value": "T13C539E72985C6E94E00486F5B131CF7DAF47E409E6272FB669AAC934904BE8CF1853", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983075, "uuid": "88df2385-2905-48bc-8d90-cf25cbdaa492", "value": "1536:avhSDxDXWbW0xq05zvA0cu4U/HKRRf5x+RCQ:avhSDxDXWb3BY3uhqT5x+R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983075, "uuid": "3cc1ccf4-e459-46a0-9b85-2f814265b3ba", "value": 66408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983075, "uuid": "543e0eb8-eaf1-44c5-aa81-b47c0b73a136", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e4a7f75-1c59-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983087, "uuid": "90e441de-9416-4255-82ab-8a8239fc2c43", "comment": "Malware payload (Mirai)", "value": "6b25b9de8bab980fef87814364ed62f2", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983087, "uuid": "76f57bfa-d0aa-4840-84d0-c1b3a7bca7c1", "comment": "Malware payload (Mirai)", "value": "c5053fc9145a56877ba14c7735d2c9400e94b0b759204bd253a3e8a270b3cf1a", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983087, "uuid": "33dae12a-c37b-4178-9c73-8332fb280a22", "value": "T1CB4174DF00AC5827E480CEBF77D38854A58D85DD29DACA4A646E0536B9CCD4C3C94F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983087, "uuid": "89950dd8-09a5-4673-8445-8b24fcf46c8a", "value": "48:4k5CEA02kAYkAAkAkkAbZykAkkAUkA8kAKkAKkAUkAwkAKkA8j:tCEA0NwYMGkooqKocqj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983087, "uuid": "6f1ee5a1-2448-4ba2-85da-d4104e495d07", "value": 2279, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983087, "uuid": "5152944b-0325-4d0d-8e31-27637f558ce0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8460257c-1c59-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983124, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983124, "uuid": "367de6ee-7d5b-43cc-8dde-71159b91ecc1", "comment": "Malware payload (Mirai)", "value": "31b84cdacb95ef4ed06611978ff742d7", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983124, "uuid": "b7db308f-1874-4d30-8608-dc67782ca25f", "comment": "Malware payload (Mirai)", "value": "a4b4583c2952c0394de9482e9f1a648f4a3ccf3199ce765c2b3c1b45b7a00b80", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983124, "uuid": "3b107c6c-aac9-4314-be91-c471af4e7662", "value": "T1080147CE10A88D77A8818DFB72925914A9C9C0C91BC9CE84609E003AB5CCD4C79A2E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983124, "uuid": "f32fecd2-6aa1-4e61-8d49-8670e0c699f9", "value": "12:3rWKIw+u5ZMoOF7+MB05vOpNDNkpjNwyTyygDNkpjN8Tvn:yRk5zOt+MB02kpxkkpx8jn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983124, "uuid": "db3dbbcf-0d1c-4ef7-b9d9-6da3f2fc3484", "value": 692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983124, "uuid": "e339baa9-cc4a-406c-bcc6-c54d195232ad", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03a8b734-7fde-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1744983187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983187, "uuid": "e1259616-edf6-422c-8fd5-f10bde66d724", "comment": "Malware payload", "value": "f57fb0feafebe84525278fe2d083cdcb", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983187, "uuid": "b451b219-c1cf-453c-b1ea-c19fb47bb684", "comment": "Malware payload", "value": "ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983187, "uuid": "a83a7f9e-56a4-40e0-82a4-951266ce354e", "value": "88C313CFB6313756CB5069AA41D683EA2B7E3CC09D318F190ED16F965374A5363CB480", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983187, "uuid": "fbc8ddb1-3347-48cf-b9ab-292ce72eefb5", "value": "3072:cGgdcsaktkt9SqRD4jEFwVIG+meNqZsMdynPsi:5FmtQ9SoOGXRmegWl0i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983187, "uuid": "9c5035ba-d0c8-4c0b-8f08-7d809566ae8d", "value": 123784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbf474c0-1c59-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983217, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983217, "uuid": "b5db674a-cc35-4c27-bbe2-a8e1a52fac8e", "comment": "Malware payload (Mirai)", "value": "66b25f6fdd103311c79a6d9f024ed1f2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983217, "uuid": "36cea759-0947-4901-a46b-e4b0ec9acbe6", "comment": "Malware payload (Mirai)", "value": "8b55154a936e93b8a63e9b33bcb9695b5e9c29ce661d2727704fda6a587ada76", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983217, "uuid": "2aba4c34-57d3-47b9-ae9c-557d0e9bb51a", "value": "T167E2F11AE6089E0ECAFF9FB27EE4658033035B77B2651B7289851E00650785BBF0F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983217, "uuid": "c023c65e-7fa3-49cf-a6f1-0fd15ef21f0c", "value": "768:Y+8E3uMKuF5aVRoRM+Fy0uixgm3FWYLbWFzEX46Q4uVcqgw09I:38kKuF5oWXcxi/WMWFzP4u+qgw09I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983217, "uuid": "927af149-23ac-447e-8bfc-2840c550f8c2", "value": 33012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983217, "uuid": "a582c04e-c170-4be3-bbf3-a34a43d1906a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d336ab90-1c5a-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744983686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983686, "uuid": "5d844343-0dc9-4bd1-884f-f1f165e0c287", "comment": "Malware payload (Mirai)", "value": "aaa5e87c5f5e9395bca4e07f0f52012f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983686, "uuid": "7f9e9910-e475-4265-b549-44bd11256523", "comment": "Malware payload (Mirai)", "value": "0f17756634ef88e01ae4d6bfcf23507415e402d47bcc63f33d23adef83a7f2a9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983686, "uuid": "e002a496-c788-4e36-8580-46a89a94edad", "value": "T12DE2F1E1C327500FDA4E917C01355B843570A9C087D6ABB8FE2F724FBB6122E91D22", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983686, "uuid": "c2ac5c20-f66c-4bfc-8037-4261a2dd3efd", "value": "768:/ymHKHkMheDk61bzrXEcJ+9A/60VdZ7Xqo4e0RVv8ta02NUXjML58bz:qmHk8r9GQ52DRUEr6jDv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744983686, "uuid": "b3d45f09-238b-470e-b8f5-1cec500cf7b2", "value": 32852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983686, "uuid": "7d45ae1f-55bf-41b9-aef1-822e49ef707f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8961686f-1c5d-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1744984851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744984851, "uuid": "ab938ca1-6dd9-4c11-9fb4-2dd1f5cafecf", "comment": "Malware payload (Amadey)", "value": "3cbe234a1185f87a5be77643ac671788", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744984851, "uuid": "feb884c8-2744-45ca-9d83-1e5c64414b3c", "comment": "Malware payload (Amadey)", "value": "2acc7c9c4fed3150daff3c7e18b9ae9e6f5cff5e882a1c5bf9eabf6cec19c010", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744984851, "uuid": "ff12fe46-7e58-44ab-8962-46e79b7be744", "value": "T19995337A0C397727DC4CBC318C77D02E5E26838A97DA2A2777855935E86B2019B4F7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744984851, "uuid": "87645b1a-7960-4ccb-ae0b-b44d809d483b", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744984851, "uuid": "f6eda52a-ef0f-4bb1-83eb-50f2971d99b9", "value": "49152:ZntcJpLeNO2b1tNXyFskD8BdOxZz19b7ec6mjS3QV:OqbRtBYn1N7exSS3Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744984851, "uuid": "dcafe4fb-6cac-47c1-8d29-b1484afa6b6b", "value": 1947648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744984851, "uuid": "bcf187a8-c704-43b3-94a1-909e56e1b54c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e066c86-1c5e-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744985181, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744985181, "uuid": "8092c9ff-4d12-4d0e-aa23-49afb2bd0303", "comment": "Malware payload", "value": "620ffa13ac7d470c441c8ee20f2ba1f6", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744985181, "uuid": "83bd3e2e-4165-489f-85bc-426ed3db9a6f", "comment": "Malware payload", "value": "c79ac2b40c5ee4b6d41f7b96b354156c27d56e56e12c6956e678ca8bfc7b951c", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744985181, "uuid": "3c544411-a521-4f34-840a-7449f7251e11", "value": "T15E34F1EE67D53DEC9E084539A176119F11698D270F27F3A1A183878E2520EB9EF39C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744985181, "uuid": "e2721ed9-9952-41ca-8ff0-d13069045c59", "value": "6144:lahVtKR/z8uT3ee6TgD+b11lx3For5iyQZ:IhV0R78E3L6Tg6J7xWr5ixZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744985181, "uuid": "168aca6b-84f7-405e-aad4-f9bfdefad0c9", "value": 247898, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744985181, "uuid": "c3a14829-8700-48c8-86e7-3c2175ad5bf7", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "602f80d4-1c5e-11f0-82df-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1744985211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744985211, "uuid": "19e65e97-f933-4a8a-8bda-5b4e0d57bf14", "comment": "Malware payload (Stealc)", "value": "86b8e89a006fc904c6cedf894d4b327f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744985211, "uuid": "952f1759-32c2-4b5d-8ce6-24c689dfcdc6", "comment": "Malware payload (Stealc)", "value": "e666c61f3eef5b7c2ed85ecb6e3baea9d093c40516c02e8ec878ada88c914fc8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744985211, "uuid": "9668465f-3560-44e3-8a5f-c424f2211909", "value": "T1D5C53346E3A35E2FED6BC27082CFDA53BF5479214A2072BE0205A191396F727731D4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744985211, "uuid": "80027775-7418-430c-91b2-6165fb64c695", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744985211, "uuid": "80196719-9a80-4041-abf6-5f18048f763f", "value": "49152:4SphBr/OVKj2qsDa331GAsL8HmVhmhJUz4iIyFA65MSPGHph2DX8Wco:4OFOYj2qsD0AMu4UMiICAO2pEDX8ro", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744985211, "uuid": "c42a0328-8cc2-4d07-8991-bf1f2cd306e6", "value": 2506752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744985211, "uuid": "be351c48-11cb-4712-be93-26110cff106d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99146196-1c5e-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744985306, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744985306, "uuid": "0e0cdd61-62cc-4048-9b06-045a060524be", "comment": "Malware payload", "value": "8edd82d3f591576d8167442a0010c1bd", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744985306, "uuid": "35709660-c38c-4855-afb1-c87541a9cba3", "comment": "Malware payload", "value": "efbde42f505a77fd361bcadae7f886af90bf16aaaaadb2c8ad09f41654bb3ff3", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744985306, "uuid": "a17c7167-587b-450d-9938-5e4a826a6dc2", "value": "T1C7852326A23B1897C4CD163CF28FFFB0ED7D92B08B4952F894D999D61F4A63493056", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744985306, "uuid": "59932a22-76ff-4db9-bf7c-83d0de3b3021", "value": "9c95125505b7264e3e64bf99a46fbbd0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744985306, "uuid": "b440f435-4f50-4469-958e-ad8a6beac769", "value": "24576:RzPbfC5LQcjf518oswAf7w0814VwUyvM88yCSl5KAN711HCqNm5fZXpib:RL259n8hwq7w05VwUyvFmSHf1vN2ZXC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744985306, "uuid": "b14dafa4-4efc-4fe7-b7c0-7da3a7a3fa9a", "value": 1789952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744985306, "uuid": "f8c0d682-9573-4c70-abe6-a88f8b581880", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40b75e0a-1c5f-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1744985588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744985588, "uuid": "71001d13-c771-4ab4-8d07-d74463385ab3", "comment": "Malware payload (CredentialFlusher)", "value": "a0595ff276f0fdf5458353a7c759e993", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744985588, "uuid": "59cc7a78-f14f-4145-8128-c7a843ee306e", "comment": "Malware payload (CredentialFlusher)", "value": "fb8d1b18a9dbf560954435d8591bcc5930d68cc215bfdda3b2d873c15fa34817", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744985588, "uuid": "37e9cce2-c202-42ab-ab92-7d527bbb3f50", "value": "T19F25AE0273D1C062FF9BA2334B5AF6515BBC69260123E61F13981D7ABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744985588, "uuid": "034c9b3e-51a9-473b-beb1-def5b76cb436", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744985588, "uuid": "edb458ea-c41b-4cce-8717-a07032ec26b1", "value": "24576:PqDEvCTbMWu7rQYlBQcBiT6rprG8a83P:PTvC/MTQYxsWR7a83", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744985588, "uuid": "8e677567-aa76-4a89-947a-51b78401ec8c", "value": 970240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744985588, "uuid": "4de84336-ec20-41dc-b248-6cc9edeaf5d3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a513fdd-1c61-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744986516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744986516, "uuid": "a096dbc3-af86-42b5-bb09-614de2f30a29", "comment": "Malware payload", "value": "087544bb0a7e85154f65db44229f9f0c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744986516, "uuid": "ce7f3367-dd6a-44e8-b8f6-50a3fbedc2a4", "comment": "Malware payload", "value": "918108657cc3a67d59cdf2cacec2ad827ebd8c6400296962b6a30e89344d0722", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744986516, "uuid": "70896f28-f8d0-4f26-883d-a8623ad121be", "value": "T16055332D5461A6CA9B39FDA0213ACC7FC6103DFA0BC4B9CA976132A56D3365C24CF5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744986516, "uuid": "0740ddbb-c4c9-4fc5-b177-9fc9801d57ab", "value": "24576:DSX8sUDOMagJmxagRtWdedFGQb5vNmfoCH7iS+0xrPNb0VEMYE4U5N:jKxRRgeLtNm0SF70V534UL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744986516, "uuid": "04994638-28cf-4b4c-ae1a-6b455aa0957d", "value": 1340576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744986516, "uuid": "8fa0ee6d-70cc-4e72-aea5-4840e69445d7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "858a2c5a-1c66-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1744988710, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744988710, "uuid": "f8dc2b32-b33b-410b-a821-7fbf9a845305", "comment": "Malware payload (CredentialFlusher)", "value": "0564833c9b16b39bf3b42c71126fc195", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744988710, "uuid": "740a192a-c2a7-4848-9863-44ff1b6cf1db", "comment": "Malware payload (CredentialFlusher)", "value": "74fdd1671b56fc6e04581e40f89f25d9cb15a1b1a11531ca78d02dcaff01fa66", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744988710, "uuid": "a5a91560-a53c-49b8-8a16-051c55a6988d", "value": "T166259E0273D1C062FF9B92334B5AF6515BBC69260123E61F13A81DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744988710, "uuid": "0df7ecfd-3f26-4f78-b6a7-fda3988a940a", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744988710, "uuid": "8d79ed1f-dc6f-4461-9114-6cae58e60f3d", "value": "24576:DqDEvCTbMWu7rQYlBQcBiT6rprG8aZZo:DTvC/MTQYxsWR7aZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744988710, "uuid": "7acf015c-f2b4-4d12-b826-86b6e0dd4428", "value": 971776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744988710, "uuid": "12b018e4-c999-4f7c-81db-dc0ae635f2e1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0106ac99-1c69-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744989776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744989776, "uuid": "1e9a75ca-0c52-47ec-a0e6-81496493d309", "comment": "Malware payload", "value": "da468d8a9071981d2dd984455b5cb555", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744989776, "uuid": "ac7a0f07-c94b-4f2d-a513-077277f20506", "comment": "Malware payload", "value": "4a6ab5dbee594badf614a74e72709e99ec936037efb4d1392e1685bd0397f130", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744989776, "uuid": "dea63916-1d25-48f1-b430-df84df19f44b", "value": "T19C06121EE1066C33CA67B2FD54E35609D791E0A532DC7E926CCA5A2C4B0B6143F362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744989776, "uuid": "9e9db67a-e5bb-4780-8ed6-62abef8577a8", "value": "98304:6hE57rEbTvA/DFxjtORqVZ/4ns0i6LKPEDGyS:Lp+TY/xxjdBr0i6LKPwS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744989776, "uuid": "bc39910e-c2b5-4996-b3bc-6454885a07f2", "value": 3993256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744989776, "uuid": "5e4b222a-6636-4365-9432-c55020d03135", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b965ecbe-1c69-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744990085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990085, "uuid": "8e09250d-a1ab-43f1-94aa-cddff173b677", "comment": "Malware payload (Gafgyt)", "value": "7aef318910adff58dbc5625ecc72a75c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990085, "uuid": "345ba4fc-fc84-4ed7-8570-5aa43e34088b", "comment": "Malware payload (Gafgyt)", "value": "7d5002bb7172487d537dda8996c0e4a80e180af9adfba0d1cc46f5bfd5bb996f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990085, "uuid": "4190ad77-d042-4aac-a60a-fe5932ed344b", "value": "T16D416FDB216607FB2C90DE7332AA48C4F5D0958764CB5F58ACDD3DE980BED2C64407", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990085, "uuid": "8fc3ac14-558f-4dc2-9e89-e54053ed3869", "value": "48:vA4SADvAR0T2jBA3i0A19AJkOAcaAaSA9NAjLAaSAzh1Ay/v:vA4SADvA2TiBA3i0A19AuOAcaAaSA9NA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744990085, "uuid": "b2237866-579a-476f-8ebd-6d5fe2236bde", "value": 1942, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990085, "uuid": "f6fb1f02-4cc6-43e7-b504-983ec2b64e34", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9ce2a07-1c69-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744990086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "b0914fd9-11e7-4be5-96bb-4f8054611eaf", "comment": "Malware payload (Gafgyt)", "value": "6d224acf8437c18434b11e347268e24d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "8b8bc30f-dfef-432e-8227-ad86ed16c81d", "comment": "Malware payload (Gafgyt)", "value": "08130b717dff757e6e60a952e376d2e955bd2b5c67b4fe3e057b37ec2cdf4b73", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "c2fb04a7-a581-4e03-9405-f239f4117dec", "value": "T1E9935D27B552C6BBC08752B42BDFEA615833B4BC0B32720B33D47DA52B259D91E6DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "113dc126-7409-4acd-8b0c-214ef29cf048", "value": "1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3eyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKuifUm/KWOXFE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744990086, "uuid": "eb4c129b-23cf-4ed3-bce8-f1c3320a9fbd", "value": 94679, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "268b23ab-5502-470f-ba58-2a974c63aa22", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9f3d826-1c69-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744990086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "ff884403-7cca-4260-a2dc-9ef62f1219c7", "comment": "Malware payload (Gafgyt)", "value": "f98751eec7532719c518a8befddf2611", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "1d2ef1fe-e876-444c-a4de-43f6c04caaf0", "comment": "Malware payload (Gafgyt)", "value": "1b81183f5026b6bd1a9ea0a8ea21274a9be6406663241484fb2830065031bd74", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "f1282967-b192-46a7-89b2-ac1b82ccfa95", "value": "T199833C02E743C6B3CC830BB2029BAA665931BDAA1E269F49F31D7DF45B128C47116F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "36222260-7398-4adc-8f38-5809a52cf4b5", "value": "1536:W35b9Vc4N3J6lreu5r4hWj8L9WDloRmF+wVOz+sXcfW7k:Ab9Vc4JJ6liuq0YZ2oRmEwVOz+ucfW7k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744990086, "uuid": "8686fada-81f2-4d91-84f7-806a7c050992", "value": 84999, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "1447d774-c7fa-4b5b-a6da-4319ad118196", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9fb0d00-1c69-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744990086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "a9ca8453-4eae-411e-bca5-0bb4bb8be64d", "comment": "Malware payload (Gafgyt)", "value": "a81f0b5f68c93a259ab397a9a063c840", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "ed0a812e-0a43-4cd2-a293-ceb874753b5f", "comment": "Malware payload (Gafgyt)", "value": "7c82dfc375e2bef60cbffa480934de4af7f36b7a09ceacad0c37265010f907f2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "061eb639-a0fd-4480-8a30-964491a49404", "value": "T1FDB31845F8408727C2D327BAE78F479D3B36579467DB33116A38BEB42BC17892E295", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "1773583b-087c-4918-8f71-e003f3bf1c5a", "value": "3072:MSY+46m1qOzssDFPPKNy+AmkZrQAhPDCXFke:06mgOzJDFPzmkZrQAhPDCXFke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744990086, "uuid": "24bf0ca7-dcd1-4ca0-9e21-7886c639a24f", "value": 108417, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "5023c2ce-ef2e-41c4-8f97-6d76ddba4215", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba043b45-1c69-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744990086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "8a3839e0-2d88-4fd6-8f47-c6d8cc065b41", "comment": "Malware payload (Gafgyt)", "value": "34853a593ddc9fa6681000c4ca47783a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "2237b323-3a0d-4eee-a695-6af00ebd8cbd", "comment": "Malware payload (Gafgyt)", "value": "0f7eca7c754295b7fa37c2bdd5041e88ad77021a1fb6cbc23ea3e464c663b56b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "d7a5d8ca-a726-405a-a3b7-b8b7d95dc402", "value": "T195933A47B71C0B53C59B5AF12DAB3BF08B69B9E113D76185A10AEFD00372EB12412F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "63e01309-55da-4970-bf21-41e3321791d7", "value": "1536:QQK1n7bzX9jajzvxRq57wBRcGCMCZDxeBk+8Al4umXxVqDrstKfz9e:Q97vk51RcG7Aml4umXxVqDrIKfz9e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744990086, "uuid": "2acb4ae3-c064-4e09-99a1-f672f1f77ef1", "value": 93907, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "637c55f3-9946-496f-b98c-dad2c4cba1f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba0d56fa-1c69-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744990086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "2809dda6-3bef-48b7-902e-f928af90927c", "comment": "Malware payload (Gafgyt)", "value": "761d2b6ffaa866be611898ead19274b2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "275b61a2-7a50-4445-846b-9082f0204c03", "comment": "Malware payload (Gafgyt)", "value": "0a39c66f597b1df074052f9dcda0275333712ec96f954ab0f6126af201ded79e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "3c015520-bd66-42b2-aecc-c494fadbf1c2", "value": "T12E833B47E9A19FB7C0866A7565AB5E300B13E9912B4F1A4A303CA7F8434F4CD790EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "d3f28f82-ffc2-4232-b4a0-08a9856b9cb8", "value": "1536:ClN9YyOXmMSr4k9dgGwKGg0CfjGJCgdojMyTRLmkxVqOEeofzee:g7OXmMSr4krG3JjBQLmkxVqODofzee", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744990086, "uuid": "5b58d8cc-bce6-4630-b64a-dd86a7ed1d20", "value": 88733, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "9942a13f-28de-4b8a-bb37-9319b50a67f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba168e09-1c69-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744990086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "fbd44f73-b46d-4bc5-a041-1ec4364b037d", "comment": "Malware payload (Gafgyt)", "value": "c14939bef17888e4b8cff44b3cb34f22", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "80a9d511-37a1-4475-b4d1-cf3534e3cd1f", "comment": "Malware payload (Gafgyt)", "value": "dde5b2f9db6f56dc5800f374e4dca7639462cea1229d935462fd26eac1c5e0a1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "8b2f88e4-f253-41ae-b254-0478eeb70df6", "value": "T1DAC39517BB618FB7D81FDE33059A8902108DE58A12D96F6BB2B4C92CE74B94F08D3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "6ce19ccf-bf1f-400b-b7f8-8f43bba6dbd4", "value": "1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8Ep++DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8Es+Dw8rmW+IFB1Dt1hR/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744990086, "uuid": "9210bd5f-7de2-4c1b-bfc9-d4f67335023d", "value": 126042, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "44892a2e-ecbd-4010-a9f2-22af0164ca6e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba1aa5e3-1c69-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744990086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "f72aa2c3-c530-43cc-9cac-6d5d0414025a", "comment": "Malware payload (Gafgyt)", "value": "94bd689da5777e233c17a04ab524f0c1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "e141c67f-df30-4e54-a828-1f53d3e7e0ac", "comment": "Malware payload (Gafgyt)", "value": "9924d550be21a11312b3e6bfa85e273c773ae9d8daca46124b78c7a5cf8014c3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "d6bdb38c-fd89-4eea-b0e7-90bfdb274fd1", "value": "T1E8C32805D5508767C2D3237AE79F825D37325BA4A3DB33215A34BFB82BC27891E399", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "b9e6fa2d-4495-45db-beb1-e1c3c6659d90", "value": "3072:ekYPUfsgnsb0J2ag/VfzkDN0dn+mTQOY5NX3cn:9YPUfsgEo2a0zkDy+mTQOY5R3cn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744990086, "uuid": "cb8b8339-91b5-40b6-8251-2c3a2980f3f9", "value": 121007, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "21986388-edc5-4aa1-a89e-277c0420473b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba1d9f01-1c69-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744990086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "d3e8c629-b218-47bb-b5fd-d946757557c0", "comment": "Malware payload (Gafgyt)", "value": "30350466f9e3868031594e58b211bbf7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "c056c3aa-19b9-44ed-bbb4-572c6ffd8f9c", "comment": "Malware payload (Gafgyt)", "value": "096869f7c6b9d216fcec5c6c136a54b896ab63a549feb4c0f7b5495e5b8b596a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "80bf108a-4132-4035-bc8b-b98330f6c02c", "value": "T10AC3842E7E12BFBEE668863107F35F70879521D227A19382F26CD6181E7128D1C5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "6496d7d7-50b8-4e90-83ec-f3f73db07b6a", "value": "1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBelEdWfRZrmW+IFj:Ted0W0MZQHNd6RZrmW+IFB1Dt1hR/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744990086, "uuid": "61e2bcab-3a6c-45d8-a83a-0a8d87ee2aa8", "value": 125962, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "7c33e044-9d0e-4104-99c6-2f77c32e4f35", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba2316c9-1c69-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744990086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "d479152d-3d62-493b-af72-6bb057058306", "comment": "Malware payload (Gafgyt)", "value": "5cb0ae264ee4e72d1e80585ccbf74040", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "1a91b43e-3536-4e6d-b4c0-a2afd6f12648", "comment": "Malware payload (Gafgyt)", "value": "60c44de8fd81ca49575fceb2c45f32b33763508ba515247bdf76bddc879dfffb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "e4bcc377-61cd-45b4-b3d8-42c4b535e172", "value": "T1E0F34905E6408B57C1E2277AE6CF824D33338B94A3EB33155938ABF43FC27995E269", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "11902b53-cc38-4f00-9627-191a8645477d", "value": "3072:T1g2/eINNlzx2kkQCMOaQcvB8YnyLRM/9q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/6YnydM/9MmFwfBxE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744990086, "uuid": "71646117-2687-4cf8-9936-f22c6119bcf5", "value": 159888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "7df69f07-6c05-4b0f-9a65-bed09e6a9234", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba251fbd-1c69-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744990086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "c2494b69-5725-4d62-9d93-c9217a7d74d7", "comment": "Malware payload (Gafgyt)", "value": "4001c2174217d3807b74a8dc95bd8b2f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "3a5be29a-1b2e-44a9-99bd-30137417bedd", "comment": "Malware payload (Gafgyt)", "value": "c8721e5abc73fb3aad93d29df092169289e7509b46a4cac2ed81038749794a4b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "79a80319-92f2-4e2d-80ad-27bf2b80ead3", "value": "T12EA31A44F841872BC3D327BBE78E479D3B36569467DB33116A386EB42BC17C92E295", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "90cd7726-2714-48d3-8a10-f8ab3db2ee61", "value": "3072:VSx+i6mqaObhNKnPNKV+qKmZuqQ4DPwXXtse:y6mRObnKnP7qKmZuqQ4DPwXXtse", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744990086, "uuid": "0e0951d2-b721-4d81-9c41-141f2ddabbc9", "value": 100871, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "02389d3d-3d72-4e77-ae66-bbe7f89b1a8d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba31841b-1c69-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744990086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "41447d44-b798-416a-a86b-ed173374f584", "comment": "Malware payload (Gafgyt)", "value": "7bfc3eea13f06e4c5e2f6e5896691a93", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "eecb45f5-0ea8-4a53-b83d-e08413ce9179", "comment": "Malware payload (Gafgyt)", "value": "8994dfc91c16a138574209fc9af7971ffd14b29563bc17879fffb0c21e8b4511", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "a934fecc-473f-4e0c-b2df-4ce94ccf63fd", "value": "T149A30896F800DFB7F40AA67604D34B20B670BBE54F532622731739A6AE762D52823F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "2e5ec7ab-5084-44e2-b746-8b3782fd4544", "value": "3072:/Ir2vIBAxMyAOLRcftB2OemuxVqDr78fz1e:/Ir2vIRyAYcr2OemuxVqDr78fz1e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744990086, "uuid": "190de0f7-27dd-4685-8295-61c8528acec3", "value": 98919, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990086, "uuid": "3d3b46d2-486c-4a94-b2f0-fbb1eafbd1a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4382b037-1c6c-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744991176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744991176, "uuid": "7e08df4e-c836-478a-bde4-036a49eab8e4", "comment": "Malware payload (Mirai)", "value": "9acf65e4673415bef5067f57324bcc89", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744991176, "uuid": "3c221b80-3d6a-4141-8c5c-5d4d300744c8", "comment": "Malware payload (Mirai)", "value": "e07b3c8b3eb7d2f4c3c97e6a09949948a5cb218c39ff490999434f875752ed1d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744991176, "uuid": "70d45655-d810-41c4-8373-1fafc2137700", "value": "T12A333C35B6361E17C0D2647A21F75B14B6E116DE22E8CB5B7D730E4BFE61540A803E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744991176, "uuid": "0d6a5661-ef46-4e4e-a04c-c3786ed9cd23", "value": "768:Gxo54RPsFKVrp9XH+FPAOCcQOdPfYSDE6Gf50oiUO+BoaFDwv:GxVxscVrp9XH+FPLCCBFgCoPB+v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744991176, "uuid": "f65ea738-2048-468c-a14b-e70e5a9eed7c", "value": 51504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744991176, "uuid": "00b8d291-bec0-42ac-a43b-bdb2f17dc7f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13510740-1c6d-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744991524, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744991524, "uuid": "b431e53f-9be1-4ddd-be37-243d8dba5502", "comment": "Malware payload (Mirai)", "value": "3f72be5a57fc038a45b5aef6b0499c4a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86_64", "colour": "#8e3094", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744991524, "uuid": "26c9d062-56fc-4095-b5bb-5e42ff893a35", "comment": "Malware payload (Mirai)", "value": "4507f814be21571a266028089e9f54d614eb229715dcece949ae86aacb72782e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86_64", "colour": "#8e3094", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744991524, "uuid": "acda87c9-3b18-472d-ad92-63cc0501e5a2", "value": "T1754423E64E3A8676E077A3AFB72EE83905E1ECE549EDEDD20D1513D1D3081C149AC4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744991524, "uuid": "c1348941-d0de-459a-956f-d083d6da0153", "value": "6144:rsqOSDW2V9n6Je5KF1x2VlklZzxLK3uROkBfo:rsqjW26J/z2VlEZFuEDBfo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744991524, "uuid": "0ba90725-77af-4b1d-b456-af19654f5590", "value": 263628, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744991524, "uuid": "c07ddfd7-53ea-4a77-8f6e-b3ff1a06886c", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9b84dc4-1c6d-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744991884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744991884, "uuid": "de2a3c19-66ca-47a3-8a4a-d114ce7c2f28", "comment": "Malware payload (Mirai)", "value": "9009218e12e127e8892be770354984f5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744991884, "uuid": "50f0edef-b5cc-4075-930d-529689ba6df8", "comment": "Malware payload (Mirai)", "value": "03741c9fb68bb2d5ba1c29b998a792c14f11605828950e29038bcbc5bed0b486", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744991884, "uuid": "a6eee70d-13d1-45a3-b2a5-388b253418ac", "value": "T1260184C5FDA1AA92C406FD52B0A1850650DBBEDD176B0F985ACF34F6CC5C504B573A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744991884, "uuid": "a952bce1-c4fc-4c17-9a2c-2dd9c9df8936", "value": "12:3WKDyPIacMQZxVUXuAZnvIAZnGGAZhcsEAZcI/ZBc4NAZ65lcFeY:GIYcMQZw+AZAAZrAZKAZcI/ZBcmAZ6z8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744991884, "uuid": "572a6566-f38d-4a3d-b83a-f22657fa9ad8", "value": 757, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744991884, "uuid": "543d8c0c-eea2-4737-b380-fdf66fc988b7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0046369-1c6f-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1744992754, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992754, "uuid": "9c2b29b3-45a3-4fcc-9888-eb2161e7204b", "comment": "Malware payload (CredentialFlusher)", "value": "1f35f4256af0bc1dba15240128e1f07e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992754, "uuid": "f0540609-9fce-4c6b-81c9-79bd053bdea6", "comment": "Malware payload (CredentialFlusher)", "value": "ab7887d339ae2d1403b18c3dcb7190d40bcf29c993a6210768d796c02ff8d8bf", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992754, "uuid": "cdbfc9c9-6185-4cdf-a2ed-ec4c8be6e753", "value": "T105259E0273D1C062FF9B92334B5AF6515BBC69260123E62F13A81DB9BD701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992754, "uuid": "be8de95e-800a-4e74-9043-5fe3031a2b56", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992754, "uuid": "efae99f4-4a88-42f0-bf78-722bd924ad17", "value": "12288:sqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgael5jBR:sqDEvCTbMWu7rQYlBQcBiT6rprG8aoV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744992754, "uuid": "91a43d43-af45-4148-a309-8bd49bfc6e21", "value": 968192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992754, "uuid": "094f2bd0-fd8d-4272-b9bf-fae64e987e3b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3ea0263-1a77-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1744992844, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992844, "uuid": "35232225-0052-4aaf-a2ea-9985a9d90db2", "comment": "Malware payload", "value": "567d3249dbe60fa9478a424a69c2c535", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992844, "uuid": "63bccaa5-2ce0-4498-acd9-7b316e13ed57", "comment": "Malware payload", "value": "ff70c53dd6e9806c588d8f78ee35d406db0879bf5419a18a87c7982c79e3e9bb", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992844, "uuid": "8a764242-7cc0-40dc-bf88-5880314db39e", "value": "T19F05E184F5E01E67E487813F9B8246720266ED5FB34AC317574876BBB4BEA34EB153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992844, "uuid": "706c60c7-18f0-4617-a079-07b74fe30bcb", "value": "12288:BZpdDbfRWxSYOkwVcqcMFT5G1z6EtYOyDIGOnd7w4bLvVc:BHlb/KwiqcMFUzYP8GU7PvVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744992844, "uuid": "b7e1f7b2-9c85-40ca-9507-669f064f3eba", "value": 848048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992844, "uuid": "2a70cf96-379a-4724-9d9d-dc6f776145e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992844, "uuid": "ca8a25a1-2e8a-428f-a4b0-1a8bd374e7fe", "value": "t189217143a83f9f3ad5a2d8b0dc6a0725512b5702b4f9e7109f3ca9d06c7a016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1744992844, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992844, "uuid": "2f16eae1-3da8-4210-9b0c-68ad5fe9c26e", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992844, "uuid": "49e2958a-bf76-40e8-9976-330e546bb413", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992844, "uuid": "97701199-150d-4800-bb69-554666a7eb44", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992844, "uuid": "743f94b5-0d91-4cfc-8e4c-4525367017b1", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744992844, "uuid": "f2d685fc-15f4-41fa-aba7-cd7957ac4b06", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992844, "uuid": "ce4d6459-72ab-4a8c-a475-674ca293041e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992844, "uuid": "dcca8430-ba40-47b1-8a90-11c3fdcdc589", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cae4e4b-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1744992845, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992845, "uuid": "5846d3eb-f585-4ac6-ae98-83f98d9b9b0c", "comment": "Malware payload", "value": "936b35bfee8232f437bf6b46e88401dd", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992845, "uuid": "cf2d2314-d522-42c8-bb43-d0e5f0b545db", "comment": "Malware payload", "value": "de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992845, "uuid": "06838feb-2904-42ce-8a1f-2e1b061d1810", "value": "T1B9356D56F9808EA2C5D8177BF75D835833134B78D7DEB102CD08672877AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992845, "uuid": "04ee5866-66ac-497a-b109-1aa66b7cca22", "value": "12288:E8dASOYRNCAJump208iJftl7zmnSrlcaUxQ5TVFQGl9eLtRajZa6ZTxIVD7bLv:E8dbbsO38+TfgRinIVvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744992845, "uuid": "8516999a-7b03-4e1f-b5f8-8658c763166e", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992845, "uuid": "489781bd-ff6a-4c5a-96d9-b5b37d810194", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992845, "uuid": "3b32a69e-6ed8-41ae-8ef6-c7e60ba2afbf", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "922d3ab9-1c70-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744993026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993026, "uuid": "a4ef0685-5079-4f33-b2c4-59b8657497b3", "comment": "Malware payload", "value": "74c00a12dbeee192d7d364236395b00d", "object_relation": "md5", "Tag": [ { "name": "Cleanlog", "colour": "#6e4d28", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "LogWiper", "colour": "#FE3C3F", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993026, "uuid": "e7b84da3-4a76-4755-87e0-1269876a45f4", "comment": "Malware payload", "value": "7d8d2ed7bbc8f2c21a69b1692855465b5308d72e3a84e0ab86808eef027ddf9b", "object_relation": "sha256", "Tag": [ { "name": "Cleanlog", "colour": "#6e4d28", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "LogWiper", "colour": "#FE3C3F", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993026, "uuid": "c88fcff8-1616-42c2-8a29-52bc86b7b7ea", "value": "T1E3D2C70BAAE8EE3DD49583308FCFD270636178756732660F31D132B72592AA42779E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993026, "uuid": "b047cfe5-e382-4f99-aa8d-0eb386457180", "value": "768:WJUvnfXPH/3vnfXPKC6yqiaSK+UbfwXZVjUCVLgJ2DTmek:vUbfwXZGqs2Pmek", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993026, "uuid": "a81130f1-84b2-4512-b64f-489b199151f3", "value": 30456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993026, "uuid": "c92081ef-9f71-4ee3-88fd-33955b15f264", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8b02367-1c70-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744993144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993144, "uuid": "0436a216-fb99-4ab7-991c-cc97104d0838", "comment": "Malware payload (Mirai)", "value": "d4872d9bacd97505b4db1a7093a70382", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993144, "uuid": "3d91e1b5-6808-486f-ae95-7dd36e2c9f71", "comment": "Malware payload (Mirai)", "value": "e09961b6b4524994758c305714d671ac1249e0b9ecd7f585418e7b5f23325c4a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993144, "uuid": "db19d2af-c0b7-4cc3-9610-0eb78673a631", "value": "T182F08BCE8195DD742882ADEBF0126A1A6CC7D0C90BD50FC821CE107AF4CCE0CB262E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993144, "uuid": "04c3a65f-6f82-44a3-8964-e9496f818203", "value": "12:3rWKIw+u5ZMoOF7+MB05lZt3ZeDNkg2FhoA78j:yRk5zOt+MB0HZdZEkgi6j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993144, "uuid": "2300ceec-dfd3-4f8b-b76b-ff3514b4c1ab", "value": 571, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993144, "uuid": "b5cb24ae-b5ac-43e3-85d3-61af9ba6431a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed442e4d-1c70-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744993179, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993179, "uuid": "22a7eb22-d367-4cd9-aa5d-59a4fb78de7b", "comment": "Malware payload (Mirai)", "value": "c746ea45317843d8c4147ec871e5a902", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993179, "uuid": "c1daa0d6-1b67-4f01-863d-f25522e23fed", "comment": "Malware payload (Mirai)", "value": "94dcfc446ff4d7cb2f9e80f85b5c2629aa3feea16fb76db14d4a34e61506eacf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993179, "uuid": "5de34698-4ddb-466c-a54f-5ad289ba9403", "value": "T15B92B0A023CF59B286F18C31B69DCB8AB23365F7D2E520363E54527AB6460167A7C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993179, "uuid": "ce85b63b-d9f5-410b-be03-537baf6eafef", "value": "384:UBfB69pW3Rfq6BFtC9dxkK+L/hc1J2l4MFuzqm5HwRthymdGUop5h0:UBf49p4fqTNp+rheElKXHwHs3Uozy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993179, "uuid": "1d7f5d8f-3412-4456-89b7-3f750b940b81", "value": 21136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993179, "uuid": "840b759c-9d0b-4fff-bd28-56fdf1c730f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "685acf96-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744993385, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993385, "uuid": "f2160df0-90a1-47d5-8996-156761935460", "comment": "Malware payload (Mirai)", "value": "79d48caa702b947689e1f8fe7a6e55f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993385, "uuid": "da0744fb-fc01-4d18-b9ce-ee7e8b711129", "comment": "Malware payload (Mirai)", "value": "5dd0122e48c815eca941050038ecb40899c21842e27ab6d9d18724ace3a34204", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993385, "uuid": "229d40f3-6582-4b8d-851b-9f99276b7133", "value": "T127B2D03C1B151BA8DE1EC0BD839C0B213CB81B35D1429D5B6206EDD7AF968B47453B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993385, "uuid": "005a1f2a-5b56-4f50-98e1-144ff0d8a30f", "value": "384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuigsmdzJgGlzDpH7uNj1JAp:neD8ZSWvZHZbs1row697qohQvg9gsizV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993385, "uuid": "55727a91-415f-4663-b91c-687230f3357f", "value": 23784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993385, "uuid": "85aa51ca-9276-44df-ab58-9f8f1b0381d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6866b6a3-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744993385, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993385, "uuid": "332bc966-e575-4759-bdea-821f40e7132e", "comment": "Malware payload (Mirai)", "value": "2c86a7bc6f54408b09cba197aa6939d0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993385, "uuid": "d85031f2-49af-4dc4-8845-31019cbcb30a", "comment": "Malware payload (Mirai)", "value": "794684d8e899f41219970ec9be463df9bfe73d2c1e64e932ba77ed0cfc094245", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993385, "uuid": "8245ed7e-d1a0-49a0-b12c-b6466ecf90a6", "value": "T142B2D0CC50943084C98D7C7C2B8D4A664F6CA0D0BAED9B26E354CD98B7BDA4F345D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993385, "uuid": "87981416-177c-4ca2-b214-66368f6dfed4", "value": "768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBp8ZqSWvk:4QlS07FUXqIYSXQKquEqc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993385, "uuid": "ecb5dd59-3efe-49a3-9d28-9d9d580bb0bc", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993385, "uuid": "19b904fe-9984-4d9a-b4bc-1547a2569dec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "686fb38a-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744993385, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993385, "uuid": "8c421702-39a2-4638-8719-4b6445af9e72", "comment": "Malware payload (Mirai)", "value": "a2d9397e0eff44541f2fc5ea263f8e0a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993385, "uuid": "6d2962ae-1e5f-4ec2-98ea-10839da3b6bd", "comment": "Malware payload (Mirai)", "value": "d0687ec007540a8cd70dd996bdeb19762f5668d409ce7c19b3d17e94f4ccb357", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993385, "uuid": "626ee66e-a3bc-4de0-9f7a-4e99c8124c96", "value": "T13DA2E119BF28828BC832297544D9E6D61353FC71F2DDDC492940C11FF5A33A96874F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993385, "uuid": "6c7a03da-6ff2-4810-a5b3-1a20da06b43a", "value": "384:M0DLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaHhib+502F2vwA9dWuMW21bAK1oTD:x98o08kxofBE+ZkXaEbp2F2TWul0c5Qm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993385, "uuid": "8e921449-b991-4d4a-98be-ea7795e3f328", "value": 21492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993385, "uuid": "65af8260-4c2b-493e-9710-ad4b8b8ab3e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6875f14a-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744993385, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993385, "uuid": "b5d75ff1-3347-4c67-805e-d64053edea27", "comment": "Malware payload (Mirai)", "value": "344cb9758d5dd20a053c9b7e3527b288", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993385, "uuid": "7c19b0ba-c747-45ed-a2c0-9d7520208e90", "comment": "Malware payload (Mirai)", "value": "d8df629b792d049bcffbb07ac1bf72c6844334566bb4959676deadf68a33ce00", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993385, "uuid": "4b14781a-d5cc-4c41-9b10-e2fae1fbead4", "value": "T1CE5105E5E304AEB01D6A5E5BBB750441718160EADCD46FD2E0DCBBAC25DFE587084B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993385, "uuid": "d3b5452e-122e-455a-9bd0-03707afb4f3c", "value": "48:iDgxzvzLD7s7N7JzLD7n7o7azLDnoazLD568zLDHI6zLDfu3CEzLD89ZzLDbcOzQ:iDgxzv3D7s7N7J3D7n7o7a3Dnoa3D56p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993385, "uuid": "b257b50a-da4d-4c6e-ad8b-6f26ba943c7a", "value": 3019, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993385, "uuid": "555444ad-1568-4d5e-8d0f-d808eda8cf9a", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1744993385, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993385, "uuid": "16373a8d-2a67-4b17-a67a-a102d30c3c5d", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993385, "uuid": "b3564357-c23f-4801-9e26-6f71b59990b8", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993385, "uuid": "efc2e10e-6972-4424-882d-69a820f4f092", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993385, "uuid": "4de7d435-4afb-4dec-beda-0ff756b75b0a", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993385, "uuid": "c7b5de24-f062-4cb8-8433-265c563b3d0b", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68adc9e2-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744993386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "0de44b22-2715-4d43-97a3-947a43be97fb", "comment": "Malware payload (Mirai)", "value": "882c522707026257703cf3e6e837fbd8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "76de837f-32be-4569-baf5-88f7cadc78c5", "comment": "Malware payload (Mirai)", "value": "4f819b2969b86ddefca18ae1530f160d46c1a840b66ea0ab54a0eefab407aaf5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "49124b6a-8c20-45cc-a30e-7426a601b824", "value": "T144336C36E029DED0C6560234A4E88F751F13F1C883536EBB2AE546B2645396CFA19F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "ea867d6f-a4bc-4cd0-ae4f-609d46c6c9d7", "value": "768:Oa2vU7eng2qGJert7LrLMU6fgatQh+YbT/9+m3CZQoV/bnmCozw:Oa4U7G7SvT6ftBTm3KVrmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993386, "uuid": "b7c079d3-261a-425b-8878-2e17d53b6159", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "6fc3df48-23e1-4c7a-9196-96491b9bc0e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68add710-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744993386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "45b76860-d948-4a2c-a773-2d9891fad7f9", "comment": "Malware payload (Mirai)", "value": "3081d7b8896848c01e191dce3efdcc18", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "815770f0-3fed-4358-add1-c4906e512474", "comment": "Malware payload (Mirai)", "value": "242892f9700928817132a15b6463db2fb04eaee005994be54d469615df261988", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "b685b577-9ad5-467d-902a-394235d40b9c", "value": "T132B39CDBF24701A0C8624AF007CB4BED3E2723815F27C5E72C6A657969791CF8905F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "553a505d-a1dc-4736-bf9b-aeeddb31b0a0", "value": "1536:Fu27gBY9FSSpj3z5Qxw6YaWWgg1W/LWy:c9sSyzz36YaWWgg1Wq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993386, "uuid": "cf541a2f-a14d-46d5-b3a2-361cef02e856", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "3126c657-4aa4-4ad1-b999-776b802af11c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68b00390-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744993386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "d72e831f-58cf-4be5-828b-a864780f1b79", "comment": "Malware payload (Mirai)", "value": "81e76f1e4d2410908333fb6684a89297", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "7d7f4a20-c363-4f38-810c-c5213121c80d", "comment": "Malware payload (Mirai)", "value": "c2d982e87744c71b89516b770bc2c583a07799a588d53ecef76ae4e08c9ba879", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "5c46e0a7-4ff3-4d54-a20e-28d5828b4ac2", "value": "T15DA2D025D345AEF4DBAF9D9053C1C2C2B6F543C7278AC8F340EEAF016916046B789D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "fa528794-3c94-4853-8303-e138d9ac0f11", "value": "384:m/JywWc84Tp2YshxqlDeAkSqjGJLeCE5zRW6C5GhM4uVcqgw05VxJ1:mRxsSVsMD6xiJJE5zRWNYO4uVcqgw09L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993386, "uuid": "d4cdb398-5a71-4772-8dba-6e192cfbaafa", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "a51e1dd7-f7b6-4f39-8d84-25e9f7dd3874", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68b05c6b-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744993386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "610c46ab-8d12-4a28-8109-95f7f75927b2", "comment": "Malware payload (Mirai)", "value": "c9f63a339fd8a619f46a2c8da6d62483", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "39115fe5-9aa3-4d8b-af49-a54f6ac9aad1", "comment": "Malware payload (Mirai)", "value": "8a4d46c536f75bd4abada9f36f95e93edceaaa27085241aeff166f6d1d806bc5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "e7f52dad-95dd-4d66-b1de-b63e8f57cdea", "value": "T10A230231890A9EF114302C76DFD5979376F12AB2C667312396290B382FB9B131E57E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "b69059eb-618b-4c0b-b863-d9ac398637c9", "value": "768:S/TYCoIxdEk+AxoTZAZHFeq8b3v9q3UELbUXfi6nVMQHI4vcGpv2:SECFd+A6YHAxeLRQZ2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993386, "uuid": "30e1d149-c2b0-4c65-a5b9-b723345008bf", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "79957268-1059-424c-aba3-1bb02157934e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68b1821e-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744993386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "4492ce61-fec7-4fdb-9b0c-d857ccbd71b1", "comment": "Malware payload (Mirai)", "value": "eaecb13ba2551f8c28b236daa919e292", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "6dac60b1-f2b6-4d0d-a71f-bd8af67edada", "comment": "Malware payload (Mirai)", "value": "427dc94e495a3e665d4ebeef9abbc79a2ba49b4664762c60d752542add768093", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "ecec5ef1-93c6-470d-8489-b513836fb334", "value": "T101431921B63A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11680A943D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "470bdc4d-9344-4360-a4ba-05dceaef1b6c", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFIuQKqgESnmC/xO+KpAw/:RqtmZPuutfbltZFBSJsBcfDSTFI+BE/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993386, "uuid": "33fe406b-e205-435c-8129-12a744eee897", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "498d0683-6a06-4621-b430-1ce48d7f1ac5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68b1e2dd-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744993386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "74560535-9fc6-41b4-924c-6d9d8467571d", "comment": "Malware payload (Mirai)", "value": "b95f21ebfeb57dba9daa309be2f01bd6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "c94f22e4-0de9-429f-947a-564c5b5db350", "comment": "Malware payload (Mirai)", "value": "d978b3f300a03ae751f766a05afbec57b601e624a954fca65df52b708b39d007", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "f321ddac-ded9-4858-84b2-3be8db9f2cf8", "value": "T113C2D0E0B727FA31C4206C3DE52B4D8A3A510A7C91FE393664258D398FC165B67A84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "5ad29294-45f5-454c-82c3-35a7f0a185d5", "value": "768:4MKyhegCCMqfizjoNpd2vJdX6vwrk9q3UELuQ:PKy4qfqoeJdXWgNLl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993386, "uuid": "2e82b571-ac47-403c-b0e5-4bf73162d5df", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "6b546f64-4bc5-44fe-8934-583b83909e51", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68c3f24c-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744993386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "ec012359-57ec-480c-b799-238fe8f8b2cd", "comment": "Malware payload (Mirai)", "value": "42ea78849b42812c887ee6422b0148b0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "c083feb5-64f4-4293-89a7-9e7bb0e0a0b2", "comment": "Malware payload (Mirai)", "value": "8c72219d0f3c43efb7669e995c0cede3314e2c843727984d5eb5cf30e895d731", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "68a26c51-54b5-4958-ab31-085d9835dfb1", "value": "T17F330A8EB8029D3CF91BE6BE54164E0DBA3177C152830B2757BBFDA36C721945E02E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "bfc7b37d-555a-474c-a47f-d34fc640f68a", "value": "768:gduPBFnHooqR8qOCKq2cH4Y3e+TK806MMUVjzMfQXOtHud2oGP:r/hqaJM53eqK806MHdMfQXoHuCP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993386, "uuid": "1e7d5982-5c66-4a93-8a09-fe1a4a86b3f3", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "2d70f83b-1f71-425c-8081-fe7f4e953be9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68e083c1-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744993386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "fde53324-d224-407d-bad6-5ee4da452d38", "comment": "Malware payload (Mirai)", "value": "2eba0c3c78774893bf5f1f6dbcd9b129", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "344575b1-3386-4f0e-9efe-93de71c1a006", "comment": "Malware payload (Mirai)", "value": "d0ea5e38c90918afccafbb2e36c0f95d05fda47aa7766b47e5d1cecaa374556e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "b083e66a-3dd4-4f1e-bd0d-da6320af19a0", "value": "T16FA2D01572A32D56E3ED1C3DC96E8367F9A70BFC90F6327668441620C94D60B2E39B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "7e8083a5-debd-4fcc-becb-ee78ae881469", "value": "384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjVhymdGUop5hd:vvQn4j+ZO5fKAlx5s3UozL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993386, "uuid": "060337ac-6222-4a58-b984-5c0851ebbb47", "value": 22160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993386, "uuid": "3a00dc11-d79c-4475-9c7d-9390469e43ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b64ee23-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744993444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993444, "uuid": "3b678a35-aee3-4bfc-80de-3dcf43ab1e29", "comment": "Malware payload", "value": "7dcf5627fb57c61fe69601431a1057ec", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993444, "uuid": "be3c71d7-1d42-46a3-9643-96f961a17a6c", "comment": "Malware payload", "value": "4e71fd189cf074e29b93eca914c11a300ad7110d98a284023b88b65fd4524051", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993444, "uuid": "0cd0c73d-6079-4628-b2b0-6597faa9eb9f", "value": "T1A2515B042EE50324F3B68B35A8B66721C977B849CE718F8D008D42481733210F4A5F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993444, "uuid": "599827ae-2241-48ea-bf57-4c1b2c57eaa5", "value": "24:8Ayw/BHYVKVWO+/CWdpWkDWdd79dsoEZK:8y5aWkqdJ9hJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993444, "uuid": "f3d90116-3770-484d-b4bc-4b3bd544e462", "value": 2476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993444, "uuid": "201f3c7f-95ad-4314-aaf7-a3d21f328aea", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b761c01-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744993444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993444, "uuid": "bbe44bf5-c748-410c-ab73-334a44f4f7aa", "comment": "Malware payload (Mirai)", "value": "f24758b159995a76becb8f60509db681", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993444, "uuid": "cbbd6b26-a967-4555-8709-6c97b12d1c61", "comment": "Malware payload (Mirai)", "value": "29298b5e69c00b341c06c769fa292992d350871eed79956965c764bc06dd5b73", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993444, "uuid": "265c11d0-6b79-4cef-8722-f52ac31116e9", "value": "T1DF82DF3061AB75E8DBF10431FAAECEC267160BF8D1FC36D316586B78C94150660F82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993444, "uuid": "3c4514ad-1bba-43b6-bc66-7daf8190c28b", "value": "384:MnfzRV0P6iOwrkom0DRnVATuSlShu6NvmPWtUn+KMadhymdGUop5h5lp:2dV0P6+kom0tVAoNvm+to1ds3Uoznlp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993444, "uuid": "fbff530b-2736-4012-a7cd-ce1416d00c3c", "value": 18488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993444, "uuid": "756a7f63-7a67-4791-b60a-1bd9c0b736ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af7a33e5-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744993504, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993504, "uuid": "4b2b1df3-b2d9-4165-8845-44b4854f460b", "comment": "Malware payload", "value": "71631155322bf9da95fe34ee5611cb70", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993504, "uuid": "1e948e81-29eb-4bd3-a294-f33da4035d9b", "comment": "Malware payload", "value": "8503e58c2208831b77308867db674cef7115615b0b6c4ebc64c9d20bd3f098ef", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993504, "uuid": "afc06010-729d-4866-923d-2f1e75b09d3b", "value": "T1BA3166CA55630A746CB0B96772A584047BC0F1CF52DEAF66ACEC7CD5428DE096443B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993504, "uuid": "1215dc20-ed87-47c8-8ba8-4a88bd5064b9", "value": "24:19/lTb8rys9/lTE8q9r9/l/c4E9/l/49/lmNNIsOLs9/lY9/l4GU9/l2T9/l2T98:1LQrysLHq9rc4EIudOLswTUkk63IER1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993504, "uuid": "0c356db8-a0c7-4648-a0e4-18d08fdf9462", "value": 1698, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993504, "uuid": "4c9afd18-de98-493c-b76b-02c5947de3b3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d59553b6-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744993568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993568, "uuid": "85b7120a-79e2-4210-a50d-19419b266e0f", "comment": "Malware payload", "value": "8baabcc00f74e8b9b09bbd3e8a4a6ef3", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993568, "uuid": "e13e19c9-5fda-48e6-9979-d147837ba223", "comment": "Malware payload", "value": "8daa2f6bfe2c616af887f5068fe916d4312e385196ec9808b48abf81073f3be6", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993568, "uuid": "06d549ca-e1b1-43fd-a68f-b91fe6e64f37", "value": "T1285633E5684917A9D70E607BA8C653C96A258D884EB30C37C9C7B32FC5F62D71FA4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993568, "uuid": "e43ac71d-2fa3-431b-8eea-655a3eb593f0", "value": "98304:jP0j6gGnyN1QPPI5VPmPGXK21n6udbW4bAWCeSg661o5kz4UAU5E:jcjjN1QHwVPmTG6udbNGMo5Cp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993568, "uuid": "47c1b3c3-dad7-4752-ae17-0eea223a2ef5", "value": 5931008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993568, "uuid": "4aa7b1ea-e27b-4feb-8573-176665a0397a", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4592a2b-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744993593, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993593, "uuid": "6dbaaa46-283e-4f98-9b37-0f38f283224b", "comment": "Malware payload", "value": "8cd8221bd28e26eb63ed530e3bd1e7a8", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993593, "uuid": "ea0f01b0-52bf-44c4-b050-f59e93442348", "comment": "Malware payload", "value": "ea93163ccef6dab979bc72e11ccf0634077a3729c5acc9a26e30f65aab424ed9", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993593, "uuid": "051b4bdf-155e-402a-9588-8dd71c8824a1", "value": "T1D523826516C120770137979089715FAAFF67056BEB4FCA2432AC2F9B6FB7D08C85B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993593, "uuid": "ca1783b1-0727-4932-b3a8-71dc76001728", "value": "768:CXBOrn5/gV+hpXXWeY/VKyMFWCZTxzWkqk3k3uq:CXBOrn5/jPHWZtKyMFWCZTxzdh03uq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993593, "uuid": "6653a885-d92c-4edd-9796-9b5018cf31bd", "value": 48578, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993593, "uuid": "039f4116-f7ec-4bfc-9345-d7ea2f8e4f44", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3acf521-1c72-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744993968, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993968, "uuid": "e928cd4d-35c6-4c68-a530-9ed5eed4d7b9", "comment": "Malware payload (Mirai)", "value": "541fa7786905f36c741c74150c5de50f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993968, "uuid": "e8ed9ac0-163a-4a2c-b327-804fd72ef5a5", "comment": "Malware payload (Mirai)", "value": "b114ed14cd7c4b2d858d0442a6ee86d532bbe4d5b363daac2b194fd93ff5475b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993968, "uuid": "baffd7a0-8965-4d60-b247-479bac1be63f", "value": "T1F3F2F1D0560798B6D4340CB6CD8189897BAC0BBCBEF17056236845E4B6CFEC765BC9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993968, "uuid": "acb61f93-03c4-488b-b9b5-30ea71b14ba5", "value": "768:HgMiA6okLkqLjWZF/JgCbuEQkipxXmykK7dpkMa9q3UELfv7:AMN6okL9WZFhDfQ5pZm2pkELn7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993968, "uuid": "c7a17658-d839-4e94-ac75-7e009c819af0", "value": 37544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993968, "uuid": "15f2ab90-1a46-4588-bc74-7981dc7fbb23", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce04aec6-1c72-11f0-82df-82aee05be84a", "comment": "Malware payload (MetaStealer)", "timestamp": 1744993985, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993985, "uuid": "4dedd550-9a9a-48c5-b292-6ae4d4688a66", "comment": "Malware payload (MetaStealer)", "value": "08fe42010d724d8d100a352af6972bb8", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993985, "uuid": "6b66ba98-4fa2-4c80-b262-6af5bce7828b", "comment": "Malware payload (MetaStealer)", "value": "ec202b2050cc7a4030c74c6fa04ef98e67c11fa64a1a1dd0ff592141ff7771de", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993985, "uuid": "8873b4be-d3ca-4c2b-aeb0-db327e147f17", "value": "T17B51CB212BFE0725E3F34D7E54B6962AA977B846EE71CE0C00A0514D5892F01ED36F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993985, "uuid": "3d272fa1-e06b-4695-b3bc-aead8fb73fde", "value": "24:8EJdxO1aUVAFx+/5+vvLpkCqnVpkxYMN/Sbdd+5CwiXuHY8IwbOLGLm:8ExOeaOLp2nVpoYMN2dyRiXuH8wbiGL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993985, "uuid": "548c4a13-5abb-4ac7-b65c-8a6bf5de2069", "value": 3031, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993985, "uuid": "24f129c1-f242-4ad1-8e85-0929f016ada7", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfd83a38-1c72-11f0-82df-82aee05be84a", "comment": "Malware payload (MetaStealer)", "timestamp": 1744993988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993988, "uuid": "ec377f4d-2078-4abf-9044-8ff5a5704e59", "comment": "Malware payload (MetaStealer)", "value": "5f13e98fa263c43471deecf48a009aae", "object_relation": "md5", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993988, "uuid": "61d4dcf9-3bf2-4c2d-94eb-28c5688c7996", "comment": "Malware payload (MetaStealer)", "value": "483437342fa0866c20f1ae3c8e9ef93cbcaa53748c3634488d369c7ef10ff24f", "object_relation": "sha256", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993988, "uuid": "4b4d288b-ba61-4a20-9298-491899b4306d", "value": "T19F16339137D9CD3BE16F223B582E92361279BCB10734D8DB2680BEBD15316E2DA357", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993988, "uuid": "423bdaab-5a44-4909-9d65-f80784fefa45", "value": "98304:BpVPvSx+4Xd2lcNAEZouo9cQ/toXahI8h/XLMil5pvW:dix+4Xd61B1oqhIm/b9l5pv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993988, "uuid": "fc89181b-e7f2-4e78-9aaa-58bd830fc353", "value": 4091904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993988, "uuid": "2275f0ff-cc1c-47b6-9b0a-a3c1586bcfb6", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0541670-1c72-11f0-82df-82aee05be84a", "comment": "Malware payload (MetaStealer)", "timestamp": 1744993989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993989, "uuid": "d68a4643-9d46-41e7-85ce-dae0b7fd41ab", "comment": "Malware payload (MetaStealer)", "value": "7b34623e446224365873b6c8b18fe2f6", "object_relation": "md5", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993989, "uuid": "785e44ab-9679-4017-8cdb-44aed9d8f5b1", "comment": "Malware payload (MetaStealer)", "value": "9cc5c374c9a81368ada9d5b31fd25fd12a18105a3fc573860ae8c1e54dc89977", "object_relation": "sha256", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993989, "uuid": "e47bea3e-7cea-462a-8706-3bc741b10b93", "value": "T16416339137D9CD3BE16F223B582E92361279BCB10734D8DB2680BEBD15316E2DA357", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993989, "uuid": "7f28d8fb-8bdc-4ba9-bf6f-dd9c172aeb33", "value": "98304:Ipo3vSx+4Xd2lcNAEZouo9cQ/toXahI8h/XLMil5pvW:Bqx+4Xd61B1oqhIm/b9l5pv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993989, "uuid": "fee0d0a2-8aac-43b5-83d9-380c510eea7b", "value": 4091904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993989, "uuid": "cc493eba-331e-4296-a84a-f0baaa6db72d", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d064bab9-1c72-11f0-82df-82aee05be84a", "comment": "Malware payload (MetaStealer)", "timestamp": 1744993989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993989, "uuid": "f39ee5b2-96d6-4f26-9448-4e567319107e", "comment": "Malware payload (MetaStealer)", "value": "b30d5395f148ab82920ad240d76d58c6", "object_relation": "md5", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993989, "uuid": "a31b6808-18bd-462a-ba49-e254dcebe8c5", "comment": "Malware payload (MetaStealer)", "value": "ad12ddc06a419f1bcb94c38bde68cff3e559cba36b2ad900958037ff46f73c40", "object_relation": "sha256", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993989, "uuid": "23de231f-9020-4079-9d58-135cfbaf7b29", "value": "T1863601D03781D223D94719364E67CBAA1719FC92AE32B1873764BB2E5738AD39D253", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993989, "uuid": "029ffaf9-3178-44bc-b487-6dd4c59dce6d", "value": "98304:Cpd/2JMYBu8jCUOHWqd0z6tNmUIqBOTZ0FZIqISg:u2mUjCUBqKqBOl0rY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993989, "uuid": "692af5b4-e72e-428f-8610-ef0452a65fbe", "value": 5005312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993989, "uuid": "e161a35b-4c15-49c9-82f7-03657dc0db4b", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d082b90e-1c72-11f0-82df-82aee05be84a", "comment": "Malware payload (MetaStealer)", "timestamp": 1744993989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993989, "uuid": "9a2ef963-84ef-4441-a1af-c26f6e2be3b6", "comment": "Malware payload (MetaStealer)", "value": "27aa29d33ea1deac2c7b2af14f6793bb", "object_relation": "md5", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993989, "uuid": "da56aece-9950-48a3-a579-5f9d34e45962", "comment": "Malware payload (MetaStealer)", "value": "14906a91aa1dab76ca49d8df5a889c5c7c63cde51412df6ed94edff0535248c6", "object_relation": "sha256", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993989, "uuid": "1a5f323a-ddd0-4e53-9725-ab01ff97ccb7", "value": "T1131623423AC5C636D28F0532952B8B997568ED305B25C4CBBB84BC5C9F713E2ED393", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993989, "uuid": "cfee568a-9ea8-41c5-b800-c05fd05c8f1d", "value": "98304:PpvU18atT6t9dAPOFeEjlEeCDQqTvAzzSdtVADE4Dq:uVtK9d42vj2nsqTvWw34q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744993989, "uuid": "4b769047-70cb-49fa-8c2d-e221122e1dbb", "value": 4100096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993989, "uuid": "d458797c-8823-4fa4-919d-c5aede461f0a", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbbb96bd-1c72-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744994008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994008, "uuid": "81857a5c-7eaa-4443-9321-e86edad7d186", "comment": "Malware payload (Mirai)", "value": "550dc13ee254d2f14060c69a71daa48a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994008, "uuid": "ec20e037-a7b7-4f11-9d0d-247c20298ead", "comment": "Malware payload (Mirai)", "value": "e9eacc4014a23738dbc79ef4146fd52c2803d8106e85faddffff7061896a0f83", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994008, "uuid": "64ad4ce7-c76b-49d0-9b7d-8e558068be92", "value": "T1E3E2E16BA008FEC0C8601D35D5719A8A13935EFEDBF7162E1272C0D0B3CBA6652755", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994008, "uuid": "6cf8b7eb-f9de-42d5-8196-216f6b905253", "value": "768:pCyh4eqbB5pdSrlIp5WPSb3Dh2ij6Lrs3Uoze:plhLqbB52lu5Wi3QimLWze", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994008, "uuid": "73bdc522-21d6-4795-87ab-4045a46e12b0", "value": 33972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994008, "uuid": "1bced6a9-6440-4eb4-83d4-b6c9e397aabb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6225647-1c72-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744994052, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994052, "uuid": "302757fc-d623-45d4-8c0d-9febe728eabe", "comment": "Malware payload (Mirai)", "value": "adb604d7cb24c5deaef7e18785557fcc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994052, "uuid": "f82a946c-dc54-4369-9fab-7e9f8b09d7a1", "comment": "Malware payload (Mirai)", "value": "8a102c1e1e457661d979674f718e22862f81cd5be5cc96e350e47172cb466130", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994052, "uuid": "9a8c68d6-24ec-4292-b80b-9d5c15c60eba", "value": "T149E2E17AE084BC66DBAA69790E03E3C1BF93C74FEF818D9311D4AF416911621E6494", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994052, "uuid": "31c81689-de02-41c8-a7e5-3013bd0974f7", "value": "768:3AAswhNq2H8yOwklt/O7Fp6anyaA1XJf4Rhqa4uVcqgw09X:3i+Nq2H4rlRoFcLaKFKhr4u+qgw09X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994052, "uuid": "8678ad6b-f503-4b91-a50d-fdff93c6a08d", "value": 33028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994052, "uuid": "32de48da-44a7-4294-8bb6-5859cd19cc77", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "155a2519-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload (MetaStealer)", "timestamp": 1744994105, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994105, "uuid": "787d201e-599b-43d8-9ae8-12e2dfeeb02c", "comment": "Malware payload (MetaStealer)", "value": "97fec0bf5b4e69f3e0486a5b081883d7", "object_relation": "md5", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994105, "uuid": "abeba6a8-e1ca-4deb-91b2-df266e356f9e", "comment": "Malware payload (MetaStealer)", "value": "e4a52d3a9073ca4c6e73f58cf6ff67416798a17748da8337cd489103ebf24707", "object_relation": "sha256", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994105, "uuid": "f11491f1-6d75-49ac-8c11-d692cda49806", "value": "T1515112022AFE0726E3F34E3A54B796199937BD85EA65CD1C0060510D4891F00EC35F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994105, "uuid": "6a181e7e-3b13-4bc8-91a3-84095e2bff4e", "value": "24:8ULJGPLK//U8AFx+/5+qcjYnAvuM+D/Sbdd+5CwiXuHY8Ip/dLGLm:8XPQGa7cjYnAvuM+D2dyRiXuH8zGL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994105, "uuid": "98a0d78d-07e5-45b4-accf-74073cc9e6ad", "value": 3037, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994105, "uuid": "3b58f328-b10f-4730-9f98-827675d226d2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "222245d6-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744994126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994126, "uuid": "ae143e63-71e0-4d31-804f-e989a7f65c96", "comment": "Malware payload (Mirai)", "value": "fd5383a3a36bc078e9971d5c78cb51bd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994126, "uuid": "28b1f443-7733-41c5-908d-df892bfa55d2", "comment": "Malware payload (Mirai)", "value": "22973d8b572e582c8460b3e4f73a3da086e7b6532ef8bec10f09a3987d636289", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994126, "uuid": "3bec5155-ebcd-415a-9553-b67e59e9fe4c", "value": "T13D234A99F8029E2DF80FE57D54554E0DBE6063C162831B2667BBFEA32C331666D12F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994126, "uuid": "4135dd9a-358a-4023-a742-61950eb5e88f", "value": "768:BaeB3nciH0rN7MsT0/LoBadaQurNpdFT8tWzVkaku4lDJntI8N4GP:YkaMsTMLoBadaQurNpn80JMu4l1ntI8P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994126, "uuid": "a5889855-c65a-4808-86a9-d869efe73560", "value": 46612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994126, "uuid": "51f8da19-d257-4fdf-9862-6a521c01a3e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b891590-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload (MetaStealer)", "timestamp": 1744994169, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994169, "uuid": "7c5baf90-a43a-49d7-a908-576b553c3888", "comment": "Malware payload (MetaStealer)", "value": "d7f7fab6a91f6b2db5d9a3e95a7a679d", "object_relation": "md5", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994169, "uuid": "16d9cb66-0e65-4520-a25a-ddd60854869e", "comment": "Malware payload (MetaStealer)", "value": "c646bcca5046a575acde3510dd03a5fe26d0b4aae36da41cd76f00b0cff49793", "object_relation": "sha256", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994169, "uuid": "ac4e8936-b258-44ab-bd3e-de19ad9777c0", "value": "T10916DDC13354C027DA571D364E6BC7AD2769FD91AE20B08777A0BB1E5B78AC3AD683", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994169, "uuid": "ce6b0796-c71e-47b4-8fe3-986742879089", "value": "98304:XpoG6mSbsua9OIScdIa/OrkDqhfPx40oBjY02ftdJ6:YfWWcl2YD64/BjY7fHJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994169, "uuid": "cce56d1b-de58-4e0b-baa0-48ba1798b801", "value": 4182016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994169, "uuid": "cce47bd8-1b16-4e5d-aaf9-96114099523c", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d7390b6-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload (MetaStealer)", "timestamp": 1744994172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994172, "uuid": "afeddbce-526d-4b47-bb40-0178a3900b05", "comment": "Malware payload (MetaStealer)", "value": "b72ffde32f8ef6c9a58343d0cb4fae81", "object_relation": "md5", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994172, "uuid": "54ef7c9f-f58d-460a-bb55-f1b183da5790", "comment": "Malware payload (MetaStealer)", "value": "0d2f023d8e1cd9e50ca77d500ad3c1d01463dcb7023a09b7016d7967fd411c35", "object_relation": "sha256", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994172, "uuid": "ba8eb308-dea7-4572-8cdc-faa1e7a203ef", "value": "T1B206CCD13394C123DA870D314E67D7AA2669FDD1AE70B08B7770BB1E5A38AC36C293", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994172, "uuid": "398e2c92-8386-47ef-b149-6aabb0d63277", "value": "49152:npRh67/evESbgumRE0AcOereJ01DV/LOlt5w9AGl6r3Uiakb3MvMYnZPPTg:npIbadmRE0D5rewKlTuAm6jxaAQMolP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994172, "uuid": "0f66f689-1613-49c9-9131-1e5d03ba2a04", "value": 4014080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994172, "uuid": "8585fafe-665c-4190-a282-7e26ded2850d", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5de455ea-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744994227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994227, "uuid": "9d39986c-622b-4240-a4d3-638bd97c3441", "comment": "Malware payload (Gafgyt)", "value": "b8a17f6e8dcc22740ba4f4ee08c4a3cf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994227, "uuid": "cb60966e-56a6-4c8f-b137-600ffb4cf64f", "comment": "Malware payload (Gafgyt)", "value": "253de175647e82df9d19779395d62694fe0f48035fe4b8e8ef2396f037d9d102", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994227, "uuid": "db3c2997-2270-4477-99d7-00b28573b3cc", "value": "T17F04B62A77719DB7E81FCE3702E5460110CCD899129E2FBF7269DA68E75A48F41E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994227, "uuid": "4df9cb45-7e30-4001-902b-52991437a572", "value": "1536:IJAD3RjNejZA4BfP9TTIK55lDd1F60IoUEo80a+F3hDoMiK+uGiIOUZYFMq+Scn/:IMlaIKi0lIvH/UZAtmCeKlmna8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994227, "uuid": "3d9bcc0a-aff9-4519-bcae-d797f89064eb", "value": 185830, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994227, "uuid": "397634b6-a772-42a1-9e87-d74b71aef0fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e1b6361-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744994227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994227, "uuid": "e9604420-145f-4f0e-9ab3-2c9c51b2437c", "comment": "Malware payload (Gafgyt)", "value": "7b80003ea6daa35f44df970bd0cfeeee", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994227, "uuid": "99744b88-2cf7-4375-b3b0-9caa71ae4dd6", "comment": "Malware payload (Gafgyt)", "value": "dd8113a507e0b3c231a2d6ca61085423cae9c40f2f263b8b9bbc771fbf1fc371", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994227, "uuid": "cd39963a-1189-4bd4-8be1-e061b4db675f", "value": "T1970474AE3A20ABBDE55987310BF76E70929429E322D19711D2ADD7146F7038D1C9F3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994227, "uuid": "ecac8993-3491-4174-9883-3c41549fe8cf", "value": "3072:XTPWLfh7qsNtsuSQZS5GTl5LmCeKlmna8:DPINVTQ5K5LmCeKlmna8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994227, "uuid": "0a25ed67-0469-4491-9f45-2176bbd009e3", "value": 185782, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994227, "uuid": "acc4ec24-918b-42d8-89ec-1dfd4fbead34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e1f0175-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744994227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994227, "uuid": "58ec8d6b-dcf9-4ad9-a114-5ee591e7394b", "comment": "Malware payload (Gafgyt)", "value": "f11b9ff8c3c8423a9e1e8468902972aa", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994227, "uuid": "69c58b9b-8c25-49c7-a026-67fbd5b2ad4e", "comment": "Malware payload (Gafgyt)", "value": "323d3cee91c344c6a031c95e6b85b3a64e76925d415aa857a0da42931ca1adf5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994227, "uuid": "8afe7803-e3a4-4c0f-946a-b5db10cf68b4", "value": "T1F2F3293723376E63C4D5017202E79335B6BACE8834698AC36E597FDA1E355E030663", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994227, "uuid": "4a581a20-806c-43b6-a524-c372a5e9c14e", "value": "3072:mJDvD2i2auCeaGCmzXT/UYsIgftzkLd6X2fOU+oQiD6s4mxSmZwMtYw18:mNh46vM48SmZwMtYw18", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994227, "uuid": "03797c59-7fbc-4e91-b878-b8cafb7d0ef5", "value": 158133, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994227, "uuid": "c9505a14-e8a6-4d69-af99-baa019b163ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e3ae807-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744994227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994227, "uuid": "a3515d67-547e-4e24-b3f6-2c91fa4201f2", "comment": "Malware payload (Gafgyt)", "value": "6233b5ec24f4e32f4928ebcbd7198883", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994227, "uuid": "134c4911-7e63-4d58-af22-e23ff7b7475b", "comment": "Malware payload (Gafgyt)", "value": "dad804c3a5d92b7d94ba542e392ebf89521d78677064f3878b3217b15e9f541b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994227, "uuid": "53e76cee-9c86-49bd-ac8a-4b502ec8c15a", "value": "T1E4E31801E5204767C6C2A7BFF75AA2CE37715E981B933305C718BEB01BD17A96D3A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994227, "uuid": "ffdb158a-4725-4f86-b8c4-8e0471792765", "value": "3072:UdSOlXfu9uaf5BkVq50PYvhW2+FAWfjyKJ7d8jdUltjFquOTFam2RQqdvDG8:2SjvYoWrV7d8jerjFquOam2RQqdvDG8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994227, "uuid": "4fe9631e-2be8-4322-b15d-382c04d7c6d0", "value": 152064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994227, "uuid": "852cb775-9f90-4cf8-a4e5-13fbb1028d27", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e619fec-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744994227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994227, "uuid": "bc4cede8-d0c7-4946-9dfb-72d001620513", "comment": "Malware payload (Gafgyt)", "value": "a65c5e2d87dd0d9b12b5b00135869396", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994227, "uuid": "55116053-745b-4bbb-b3fa-03d970628f27", "comment": "Malware payload (Gafgyt)", "value": "7d846914eb76b2e819fae7a6db34aa0e78e13d989a8b35a7c821a506f7f7292a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994227, "uuid": "9f653dcb-0bb5-47f5-837e-e6b82d818f03", "value": "T1B74164C9118245B0AD54DE1FF3A48C2AB0A6F1C6A4CA9FB498FD38F5448CD646748E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994227, "uuid": "1ff542fd-9a89-4a74-bdb3-8f0c3d0b0d9c", "value": "24:vfm7m50fm5dmP+fmAQmAdvzyfsfm/m6HfmvmpMfmMmMFfmFmufmYamYNJfm0am0/:vqP+ozfyHtMj0eJD4ZNRqoMEH7S7eXVZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994227, "uuid": "ff01fa0f-9f83-46ba-b0a8-51aa3a536e23", "value": 2369, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994227, "uuid": "c063912f-ab7d-4477-91d8-5226742926e0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e7a7bc4-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744994228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "22736b22-aebf-4290-89fc-76a9365b0f3d", "comment": "Malware payload (Gafgyt)", "value": "1bc1ab144abb9b16ba98f73b9dc98f60", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "48adc469-13e3-4e04-8cb6-e938db80b822", "comment": "Malware payload (Gafgyt)", "value": "e97f425757431ef77611632165c1e9ce415750dd8a6603ac83bb41faaf4c5143", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "02d7ca4a-e932-4a47-8a89-2119b5bf0f65", "value": "T1DCE3F96F7F280387C8870670297BA3F05BEDADA113905281A15AFF405FB34787967B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "adccce06-793e-4e76-b7ff-0fe6093e2ed8", "value": "3072:h7YYOdj5wirv+hnOUlN2oZykZSwQp2XmZQGNOVd8:h7YYOMZy/pemZQGNOVd8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994228, "uuid": "50dcef67-f1dc-440d-b839-529e29f624c0", "value": 143120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "613a7ba8-dc88-42d2-bc84-0f22bfc8dde8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e91a9ff-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744994228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "b22ea634-c16e-4bfb-bc02-e93308c567e3", "comment": "Malware payload (Gafgyt)", "value": "4f437dec67b54868b3ca28f5b7b8ba87", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "f99f9ca5-eb41-4e12-a1e7-187cd55d2e11", "comment": "Malware payload (Gafgyt)", "value": "76e9e45451f80badb42398de67a5d66903569c7bee52d74d7d706117cdbe5da4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "2a9ad0b6-3d43-4918-81e1-79833ac662ee", "value": "T1A6D3D8AF7F0C17DBD48705B82A6B53F08FE4AD61129E90C1A15AFE400B735B875277", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "1c912818-6aa6-4fa7-b575-d0e9a0e676c4", "value": "3072:au9/+OGI/CJ1Bmuc7Mw7C3uxycearmw2uxZC+mY00/vt7gnKB:au9/++7Coy54mlMZC+mY00/vt7gnKB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994228, "uuid": "43178efd-81f2-4320-916e-07d885e780c2", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "44fd7b0a-babe-4c7b-a200-1435b49f7548", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ea0fe9e-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744994228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "41599845-81fb-484d-a845-bd51c48b6103", "comment": "Malware payload (Gafgyt)", "value": "af30f50c296b200ab1f823095c7e5b7b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "5c104133-284a-481d-9487-873173448983", "comment": "Malware payload (Gafgyt)", "value": "a81b2de2c9ad12aec7f2d8579a9eaf493e4102641262401e397c933f822ecfc0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "fa8da31e-e2bf-4809-9e18-ad5f94f4cda9", "value": "T1C6B329A20946C9F3D08316B813B7EB6083B2FCBB395B9640E39D7C749E750987E50B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "5b3cbfdc-7cd0-4282-b872-4ef900e75be0", "value": "3072:4VPH72ieMdyx+RfqeBrvZQDqBmST0LMBbgwIv:4tRekyMzrvKDqBmST0LMBbgwIv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994228, "uuid": "9d2cb8bb-c8df-4c90-a09e-b942198b1f42", "value": 108239, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "84e768d4-de47-437f-bf90-dd2c60f62d0f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ea4f289-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744994228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "c0feacb1-2414-45cb-a5d6-f77082200145", "comment": "Malware payload (Gafgyt)", "value": "aab67ffbacb6a7fe10c1be1dbbd47821", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "8baa3b88-358b-453f-87c2-2fababbb98d4", "comment": "Malware payload (Gafgyt)", "value": "b51297eb912c616173b1d1f9d1daa59ac2f2bdaf1e8cb2d8a7f1fd79c7c80225", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "70d2d8a7-feb4-45c1-862b-cffa994341a2", "value": "T1B4B30771A556C5F2D4820F7352B3FD2A42A1BE2B18AB5E81E33AFD64DE7348432253", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "fce25eb6-8efd-40e6-a400-59328f8ee3a5", "value": "3072:2KCEaFMbSbT4H2Yl+CPFEtYzw7QO+tEmST0LMBbgwIv:2pEaF0WYs+zwsPEmST0LMBbgwIv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994228, "uuid": "518e6ba8-4b5f-4f4c-888a-b205bf661d38", "value": 112335, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "8445795d-1490-464a-98dd-c96f9f36eb3b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5eb2b4f2-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744994228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "e074c439-caa1-49f3-ae89-68fa1c8bb546", "comment": "Malware payload (Gafgyt)", "value": "0e50caf9c27e173aaad8571a3f76b982", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "34ee36c0-557c-4d2d-91c0-bd777d0a4ca6", "comment": "Malware payload (Gafgyt)", "value": "ae29e19d5016bd73ac1844117daf81ee98a1b3a12335e46f523968fb51fce19c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "3b31042e-ee59-4069-99aa-0f57901dcf5b", "value": "T1D1E31801E4604767C6C2A7BEF74AA1CE33725E985B873315D728BAB01BD07AE5D3D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "9c82a939-74f8-4e0c-91d9-6f48c98ba6db", "value": "3072:ZjmOP+PccSqxNchO1G3aPOEJ78zayxT6GvCcPYxE9myOEQXcEzf8:R93aPOE0T63cPlmyOEQXcEzf8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994228, "uuid": "931664b3-8612-4496-80b5-c0fcdb121684", "value": 152696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "ff57c3ef-c050-4b15-8a54-844528617c88", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5eb3fb71-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744994228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "37202271-3cd5-4f43-9375-bcd0bcf6e410", "comment": "Malware payload (Gafgyt)", "value": "502603a98f7e9df5ea7b3d788487db35", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "1dcab018-f617-447c-943b-1c0e24465c1f", "comment": "Malware payload (Gafgyt)", "value": "489a6d5f4824f049fa84e451ffd0af640e56e1802f11b05cc752608b664db220", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "8a7564d9-bc1b-4ffb-92d1-a7297f62b75c", "value": "T140E32801E4604767C6C2A7BEF74AA1CE33725E985B873315D728BAB01BD07AE5D3D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "e2abc708-5de5-43c0-a04a-69fd7f653768", "value": "3072:ZjmOP+PccSqxNchO1G3aPOEJ78zayxT6GvCcPBxEomyOEQXcEzf8:R93aPOE0T63cP7myOEQXcEzf8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994228, "uuid": "966b0ad5-23a9-4371-ba4d-9ffd985d114d", "value": 152696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "b0cd438a-4f12-4af2-b952-98e858e1267a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5eb5b634-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744994228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "b523548b-467d-4866-8673-dc7ed062c72d", "comment": "Malware payload (Gafgyt)", "value": "14425c64819ee0b7461dbd03db0551be", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "f81f6740-8423-4dea-ba91-5201ac0b253e", "comment": "Malware payload (Gafgyt)", "value": "f6c3aeedf5ef5d407f82a14eadabc04397a478ffe268b71863935e496d9b2d5c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "9fae2b42-4670-4b38-86b2-a0cdd831b8ee", "value": "T1B4D3170796A388BAC08747394FDF9113A5B3FC7F033A61125741FE642F79AA59E863", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "69851d9e-ae5f-4c3d-8823-70f6e38158c4", "value": "3072:PvK6t/u70VpD/S697SijyQbX7YjgeWWKmTYG68IDR:LnVpWQYs7mTYG68IDR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994228, "uuid": "bc7b474c-0060-4256-9096-90e70465293b", "value": 140927, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "f0c74cf9-de69-4573-ba3e-3101f7b7964c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5eb5d4b9-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744994228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "6db189ed-1c43-491c-abbc-f77e27e46a95", "comment": "Malware payload (Gafgyt)", "value": "7265a60bd9772faaefe100c76dafb6de", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "c8c11aa6-6a92-45db-93a7-5fd756dd7cd7", "comment": "Malware payload (Gafgyt)", "value": "77979ef1e1d4cd11d035da7f8ded03c299d7388d79d031e92ea4fdff1daa311b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "0f02443e-3b8e-4d57-8c46-f94d987e3e3d", "value": "T143C308938621DDF7C053AE3136B38574B7967EA50F1E0A166A1DB7A00E3F8CDB41E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "273a8bf7-0d9d-49df-91ae-c3b5efb59f7c", "value": "1536:SPpx3+yuOkjo/XWI/U7q/GSHXRCm+iuBIYf9mEOeGNC37WQ:SPpHuxCWf9+wmQWYlmEbGNg7WQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994228, "uuid": "c86e75c5-8731-4a48-af85-a647a2f905be", "value": 127577, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "e8b55827-f55c-4723-974f-2fa87759392c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5eb9ebf9-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744994228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "891c8842-2994-42e5-b3a3-b555ed497678", "comment": "Malware payload (Gafgyt)", "value": "42e880a18d5cabdf492ab3e0616343f8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "b7531ea5-c98a-471d-aa15-a9bba2ebae39", "comment": "Malware payload (Gafgyt)", "value": "c2478f51a77490fc260a9c678e80339dc2252419274551ae97e82df474f086ce", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "dd880397-2298-41be-bd5f-ccc4550aaebc", "value": "T12CC32A93B810DF96E45F8E3646D38B21B6B0EFAD1A531A31732778616A372D43972F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "ea03aeb0-ec6b-4054-8cce-1c71bd3d7f50", "value": "3072:hjCA2mhvcEV2oaT5n/QWy2HFbqYm4DmxY00/vOZgnuB:hnhhV2oaTdy2l+omxY00/vOZgnuB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994228, "uuid": "1e062d6b-66d8-49ce-9feb-0fc0ef59accf", "value": 129862, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994228, "uuid": "e10c0241-b623-4c8f-a0f7-ed2ff1ed7feb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9db99fc0-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744994334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994334, "uuid": "ded180a3-1ce3-4199-a2ea-b5bc7ef79479", "comment": "Malware payload (Mirai)", "value": "fac06199fa7a1b2c06dd2f970649bbfc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994334, "uuid": "4f796ae8-8ce1-4e9b-a511-e34860fb7d44", "comment": "Malware payload (Mirai)", "value": "19b13e7b28c1cc0c8b9ed7b81e78fddf4f3ea08d45b9b81993d889914922ffb2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994334, "uuid": "54d13a6e-d4e4-4fe6-95b2-3378b6235aca", "value": "T1F1B38D9BF2871590C8A346F007CB4BDE3E2363815F5785E72D2D2579287A2DF5A05F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994334, "uuid": "6eb0274b-63ef-4298-9da4-791894feaac9", "value": "1536:XBfwLi3yt3RlNOag37Jia3hPpybnMRMTMEjxCEdRgvuW+/LWc:Rfw20RlNOx37JiaRBy5TMORgv1+q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994334, "uuid": "f92c3adb-a342-47a1-ad6a-de0a3613e7ab", "value": 108276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994334, "uuid": "de7525e7-6a0a-45bb-b0c2-c8b9bc397eec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7ad1b89-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744994377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994377, "uuid": "4ffd5302-488c-4fec-8fcb-b3bbe28ea5ae", "comment": "Malware payload (Mirai)", "value": "ba5980684a44a5b432632572b0aae190", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994377, "uuid": "e1563195-a622-4e14-baf3-5843e9c00458", "comment": "Malware payload (Mirai)", "value": "18940115248dac131d310e59249b4233994d7ef79010d6ac5f3e2e33499a52f4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994377, "uuid": "a123a814-d778-4c7a-aa79-0f75a33b1974", "value": "T11C92D061F158BDAAEBBFDEE82C04A3C633ED9EA9579BCEE10540AB44A5160175100D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994377, "uuid": "c70d0a1f-6d6e-4e30-a04b-fc93f8215898", "value": "384:QD9j23WbSf/94C9Nh5l4FzRHX/+cC48yJW/ZTRFmpV+M4uVcqgw05VxJh:k12vf/94UrDYdP+cC481aL94uVcqgw0B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994377, "uuid": "7b0d3043-0e7d-47bf-b1d9-1c9c6a0de5cc", "value": 20512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994377, "uuid": "78597797-5958-41ed-b42b-8ef4c51b32ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c79dc99e-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744994404, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994404, "uuid": "969a0db9-8b03-49c6-b5c7-a6ed25003eea", "comment": "Malware payload (Mirai)", "value": "6fe33023b25a1e1a227fa418b560dbfe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994404, "uuid": "5977d0fb-e8f5-443f-8723-595166bf8c87", "comment": "Malware payload (Mirai)", "value": "96c7e61b1977c2805a309b24d9504b25b3feafd465b6b47416c49bf0f1176c2d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994404, "uuid": "ab6af9b2-aa04-46cc-815d-3d60ce47ab14", "value": "T17AE2F133E535901FC4DD913A873B675860B78AE0AB51938EBE0D9582D33B8FCD0349", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994404, "uuid": "6ef62267-e3a7-4469-b5bc-93ec1c69d9a4", "value": "768:MulXj0GFAyDlzSgOXctMyoDN3eHyQVaalHZUGl:MWXjfnzcXcJoDFeHdVtlHD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994404, "uuid": "0fb2a8af-b98b-4874-8e6e-a2ad357ce0d7", "value": 32788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994404, "uuid": "e26a1026-40a8-4ce9-9b5b-9824d942a380", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16cc31e3-1c74-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744994537, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994537, "uuid": "1c66dc8f-a03d-4783-9cab-12592a548526", "comment": "Malware payload (Mirai)", "value": "f43c5d7576519cd9cb03019750f0c3ff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994537, "uuid": "583bc311-ef6c-493d-97a4-f6f285c3ceac", "comment": "Malware payload (Mirai)", "value": "9391f9706436b1475cc87700d4896c643e3ed5b8bd6335898ff409f482315409", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994537, "uuid": "4608b98a-2d63-494e-82a0-96f7f0e9e950", "value": "T1B6430124D00ABA74E779BC718C7864B7B68C533859FF6C1226CA1470D5E38C7C7999", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994537, "uuid": "6aa769ce-bac8-40ca-8f6c-d53175ce1c7c", "value": "1536:x3GOtZk1Wt9rwi/0fFNFFt3tmqFLFkwiGtZxyN+h05:x3GOHf370tNFFt3wqFLxFQwC5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994537, "uuid": "2f7ddcf3-fd2c-4587-858d-c06b125b7a91", "value": 59192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994537, "uuid": "baeab27d-09ce-46ce-a9e1-904bba4dad29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70be18be-1c74-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744994688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994688, "uuid": "8a37369a-ec94-45a8-976a-3f6b56ae5a69", "comment": "Malware payload", "value": "bd29adf504bde256740d4a20d6d4a9ec", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994688, "uuid": "339cee8c-23f5-49e5-b9c0-f6925f0b656c", "comment": "Malware payload", "value": "b23e428839d075da2cdf6155825a1149636cdf03cb911500a0bace2a410029e5", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994688, "uuid": "bfa7e783-feb6-4b4c-b95a-b9e1d493477a", "value": "T15F953325EF45CCB4E5580EB25DCA06D0BD1B2080AEB8BCC641D7627D8F5270F7AE2E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994688, "uuid": "f4d188e2-4180-420a-9584-3ea7bc34da6b", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994688, "uuid": "91aaf605-07e1-44f5-8675-e68480056f8e", "value": "49152:yoe6TMsPzuKH3/q6zZosNTNAD7sKH/ysNNY5a:He6vP53i+osNx+H/bMa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994688, "uuid": "bfccc581-f641-44b5-a9d2-68b0ba3adada", "value": 1893376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994688, "uuid": "650d0bdc-2dad-4607-8788-924a233f5870", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "775741f5-1c74-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744994699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994699, "uuid": "7a1671a6-e6d6-40d3-aab1-8ec4ff8f5245", "comment": "Malware payload (Mirai)", "value": "e3b67796e0a3d7c35ef95ab880e7994a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994699, "uuid": "c27a3262-6152-4225-b64d-5811adf705bb", "comment": "Malware payload (Mirai)", "value": "f129579d1242d10c9bf82d418511cfd518f56584bcaa27b137313cfe3b401c58", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994699, "uuid": "c5a7b27d-6c5f-49df-9c5f-650f3d03fd09", "value": "T1CA734B32BA321D27C0D5647A61F74B65F2F247CA25AC851B3DB10E9EAF256403603E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994699, "uuid": "eee6def1-883f-41b6-8794-55f7b42dd90e", "value": "1536:iqdCc3dlj/SL9tBhHbAbtqL/qlYk5Rm7gL4ft8hlSHW:i2YZAw76YUEWGHW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994699, "uuid": "c8f6e6d8-288e-4814-ae8e-3ec1c7b31945", "value": 75560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994699, "uuid": "0ac72a46-fa91-4fa4-bac3-93addff4a66e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff7eda32-1c74-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744994927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994927, "uuid": "570ffdc6-9843-40f0-b560-195bdafde88c", "comment": "Malware payload (Mirai)", "value": "4b9084500dec1005177b1b7249df77d0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994927, "uuid": "890f9783-9622-45ed-b3b7-c28557cc816f", "comment": "Malware payload (Mirai)", "value": "4824016deb43685429e58043609bcde345db32a94dd361861328afc64f180bd6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994927, "uuid": "917ef3db-b3bb-4898-8ce3-43af4238b96d", "value": "T1BAF2F1CDE2946A42CE9E20FCC8CF57B02DEDA98135D05B142F204D89EB19D9BB34D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994927, "uuid": "747a5718-87ae-4264-9200-e95020147559", "value": "768:PHki8rQlUfEsEaxB6eqfxEcwpzDxkExOAQ5mE1OrVMwWUs:PHGQlUcsEMxW4OAHE1c7s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744994927, "uuid": "428f51ad-e583-425e-add3-f9c39dca5291", "value": 36520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994927, "uuid": "cf65113d-a4c3-470a-8d0d-dcb9f37f8c7f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ea23bcd-1c75-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744995006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995006, "uuid": "2d28ae31-9a51-41e1-b427-ec329a71fa6a", "comment": "Malware payload (Mirai)", "value": "dec61ebcbaf3381da2a25532893dba3c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995006, "uuid": "f9111f63-e19d-4cb3-9e70-5ba1378c7493", "comment": "Malware payload (Mirai)", "value": "f4178cbb845bbc0ee0f0e5451a735d883c3a02678e738e84f211b04a2c7755c5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995006, "uuid": "405fb523-9be6-4cf6-bc61-02f275d09207", "value": "T1ACF2E1EC090881CBFA66D4FC07E5175528641FA56003F957ACFEFF438A060D8AE62B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995006, "uuid": "58f7fea8-27ee-42a2-91eb-99ef286fad0d", "value": "768:+FEX8t4vu/HE9xSlMuamntz2vR5C/QERUzV0air8tiFh4JgGlzDpbuR1Jvd:1X8tswEOMu7nN2vHzERU0ai+oh4VJupd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995006, "uuid": "99aab276-c545-4388-810e-85424aef1c26", "value": 35528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995006, "uuid": "ad05b9a1-04f3-48c6-a180-41b594f77e11", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "305e76a8-1c75-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744995009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995009, "uuid": "db433cc0-3a4b-4407-a19b-ea4899ee8730", "comment": "Malware payload (Mirai)", "value": "af7437d2a833f68cc3c6f1bc56c652cb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995009, "uuid": "a0da5fb0-97b5-4176-bed1-7cc110c2b9bf", "comment": "Malware payload (Mirai)", "value": "0fc4538c845481d2f2dcb7c146dd92e8c643a01f36fc836fa3eddc8f83b194f5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995009, "uuid": "b58c2fec-8fa5-47ac-9454-d321ed239eaa", "value": "T1F653AE66E8266D58C19542B0F4A4DFB52F23A2C4C3875EBB19E2C2759053D9CFA01F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995009, "uuid": "7953b963-6b18-4557-897a-0ac4684d6c42", "value": "1536:XaqKGDGxx7RNLWuKUyyOvhmGCKNah7UI5HS:XVKGaxx7RNLWBU+hmGLw95y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995009, "uuid": "19273cc3-985c-4dfe-b587-0c03ca3f7e24", "value": 63256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995009, "uuid": "2d8f1c4d-0495-419d-aeb2-a403d53cd843", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "065f74fc-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995368, "uuid": "472028bc-2199-4dac-86ad-87fcf7acfab2", "comment": "Malware payload", "value": "3f5f0fb9f0d475fb7f4855a40dbcbfed", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995368, "uuid": "bf7dfcd0-8853-4b20-b9ab-538d3f33277a", "comment": "Malware payload", "value": "27ae30a37fafc11f36cafba9adb01c3cbba1156907e3dc3786797c4df795b52f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995368, "uuid": "c20c4145-0605-4563-92f0-59f7f901db63", "value": "T104453339E9EA93F7266BB90C6C83C5E909796F046802F5725345FD097FA130B4CFA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995368, "uuid": "e6d29c1a-40dc-4cba-90d1-ae4b7c1cbbd3", "value": "24576:FeRvo/rs+YJX4RniCb04QyxLM5FJJ+BFxFqLALNP+j/xZmT+QTQ:Q6rHRnx0El+FJQ7xbRP0S+mQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995368, "uuid": "a16767fa-b221-4d4c-8c93-f4c38513a909", "value": 1195345, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995368, "uuid": "733aa1a4-3ec9-438a-8139-d667fa1ea4a9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0663d3c5-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995368, "uuid": "61c8c5b5-2160-4882-bbca-194d6841d2ca", "comment": "Malware payload", "value": "d5c59f59fa3f72a2fc34badfd6a0e40b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995368, "uuid": "78e6baa7-2611-4456-8d50-b667d15cfe88", "comment": "Malware payload", "value": "4c1bf5fd3b8969a55d9c8ac9450f8e267b2f2e0febd098c2671631da6dac8397", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995368, "uuid": "6b116d45-7a10-43e4-b38e-a8b3698b084c", "value": "T1705533F8CDACC9DEC275F93ED39DD8ADB1FE7251219B2D08D98E888188444E6C9C52", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995368, "uuid": "e0c04e9c-9a10-4d28-a2e7-b89d03c1ba87", "value": "24576:jv6lFu53MqPnnJKAYCpQkQgs8aZzFacPefzLa6UbZlLksx:WlFWMmD/oN3XWQTko", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995368, "uuid": "58cf4a24-aa95-4c37-8a05-711480a1bcf6", "value": 1379344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995368, "uuid": "d301feca-7142-4e8c-86a0-f6b55c7892a5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06af13c6-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "ff7d58a6-129f-45aa-a496-6cec2c6d34cf", "comment": "Malware payload", "value": "8eb448bd2abaf04e9bc34a9d2156f907", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "04b0c45b-abf8-4b07-88be-221872b0a543", "comment": "Malware payload", "value": "6ace7571012769ec6b1ec8feca369ef362b2cf2b921b3e0b022a8d904c6f690e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "7262333e-855f-4ea7-9d0a-ec9c5b86e224", "value": "T1275533B012EF30A8087769783F578D5179A2E2F0DA52B680D3F1CC6D6FAD2956D4C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "405aeab2-eba2-498f-9ffb-fbfbae8302e3", "value": "24576:XVzcQamf+Nt+ZXbSD+1ASUx/usfyqko0ZiS49OZ1/3mvDzv1cw:XVzp+NdOASUpqAWw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995369, "uuid": "1e7d4b1c-f54e-45dc-be55-aa3a72238c25", "value": 1383432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "76b89a62-d265-4f85-847e-f3620764a8cd", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06bc7274-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "17df24ec-3ced-4257-906e-79b831ecea8b", "comment": "Malware payload", "value": "9535e4641354738bac7644d03b593554", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "727b841c-c2bd-4a73-ae36-5c2c6e3acfcf", "comment": "Malware payload", "value": "4e736f7260419ee363d30b046330b075850ea25de70cf0e912af24cff1fea731", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "f49e2a07-6b80-4448-a850-2da6fdce58c5", "value": "T16F45336C99BFDDED3C9F56798A70090ACD1394A3F6463AF6CF8094682B438D30E057", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "1d3b2ad4-25d3-4a48-9873-4a3af1e1fc92", "value": "24576:U1+h37SBgg4NEPedRlTTR2G9n4Ei4pRK0rwwqhE1TDKsX/a71:y+hrS/4bzhTUG94qpATlERSZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995369, "uuid": "3f46be57-dfc9-4e6a-bb3a-16f135431177", "value": 1195758, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "f87f3519-2685-4903-a87b-f7a663e464a5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06c8a2af-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "6663bb0a-eca0-4470-a4f4-d88beb24536c", "comment": "Malware payload", "value": "a04a4fd9261c7720721ae82939a4bfe7", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "e1e8de8b-4ee6-4a2b-bf0d-a748815fc96f", "comment": "Malware payload", "value": "3ef516e6e96b8639e44042dcd951e21263d61960f21a5f45af8b5d830db9d77f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "c4555b69-c48a-4eb9-83ec-d24e56994ca8", "value": "T16F2523248999CCCF57A935EAEEFA2515C09C2637BA52D1F280910C88794FA0DFC5EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "8adcbb00-e53f-4d04-a2b5-d3026ed2802c", "value": "24576:79/YXGXAa7AmVzwcCGhcYTs/RH4nnPO/a0cao:79/YoAa7AmVqGhcxREnG/aZao", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995369, "uuid": "fd18e039-95e8-4b15-b44b-08a3af76807a", "value": 1047552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "6fc4cbe5-57f0-46b8-9264-d11fd17a768a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06d5fc52-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "fc8425a7-a773-4a0b-a61d-970f69077d0b", "comment": "Malware payload", "value": "19c2c43774c80f99e55125d43fda78be", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "fc8cb8b4-ff0e-47a2-817d-7aefa40091f1", "comment": "Malware payload", "value": "00185b92f8ba3cb1adb4d95ba6d06bc82a4c983bb262b2403949f8e7d866f73c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "3f385b85-aff9-4e99-9078-3a4e26d1b187", "value": "T150553304FD2A0FEF41E07A9266F4187F009952D3B9DBB75E4A6A4306613F04C976AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "d8ee0673-8e99-4b01-b570-4153cc01e617", "value": "24576:t+MPnsOGNgtha1JotknLSxYx8uG4qjdn+BzfQQX5:t+unxg1JoteCcmn+BzQQX5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995369, "uuid": "0b623628-49d3-405d-9206-67f1e7897eb8", "value": 1382928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "57ef61ac-c9e5-423c-b0cb-cc1a2093ba52", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06e18fe5-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "d40ff7cf-405f-4bfa-a634-290bc6b46ddb", "comment": "Malware payload", "value": "549256a384fe50dc850361de3b1bdd51", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "78a4df94-0459-478e-a77b-435b767e05ce", "comment": "Malware payload", "value": "d824943750d6187eb9f726e55b51428a7ea46fac35785c0c3941e1df12aa0389", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "10417e2b-2dba-48eb-a8a1-86c10cf8a339", "value": "T11C553360BCFE00329E1D6E6C2D84A0D7C1D25EBB0E5132B4BA5540EB9908BFED31D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "e240154f-bb51-4397-8614-0688cfad721c", "value": "24576:0ihEtVToZdrQzygbTEuA4kaEPgsYfJTChMnvNwuHuYPd1OyW4+4PC:rEbTodrQzbbTEuqPgzJTSMVwuHuYXrLq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995369, "uuid": "34628ca7-d053-4091-a8dd-c7c9500fb0b3", "value": 1383432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "a85f5c95-fdf0-4908-8220-be487db0a38c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06e5ab6e-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "bd2b45ec-acad-44a4-a8c9-35f2f84be5ea", "comment": "Malware payload", "value": "be1c0bf382761e1b45ee7b24cb3f9400", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "febd19b6-6a6c-40af-b5d1-9d2c83e3fb94", "comment": "Malware payload", "value": "bab2babc99f8b28e59605a7b5225ab63fca27895a4a8b60b033d85c5e45bd0d2", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "ea0d22c5-9ad1-4d9b-bafd-54a6b203f3a7", "value": "T1855533EE7A48B965B31D0ECC3552D44BEFEA3CD78A6EDE02934F147C8188D6280754", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "d2d03d2c-820b-4c61-9292-8d74226edba5", "value": "24576:avGxS/kOKzKsNCABTiXxSJ2KS6C7evI/Uo0fNs+TDgNg5joIL9eyypLWF:auxS/fKr8xSJ2uC7evZVTP5jo6lc+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995369, "uuid": "e9e63f45-8c2a-4fd8-be1a-42018429edf6", "value": 1384968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "4e349d2f-8f54-47c9-bcea-74187efdf6df", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06fc8212-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "6b085b44-f014-4d6d-8a67-725ca59e8ac8", "comment": "Malware payload", "value": "d9c4c5a9ca8a43457d60582a4f18ea98", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "9ada0088-ce73-4403-9e5c-3938b266df43", "comment": "Malware payload", "value": "f28f27573767143b1b3b17a4320a238427fbd55c94366c90b8897e8e5f94d51d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "bf71ab29-358d-4baf-85c8-715dab65fb6b", "value": "T1425523D85517D9DF462F9CA3DCDE22306DB044473F838BB22B9C0BE672DA80C5B869", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "e7f2c54d-7f01-43f0-b057-c4b48bbad67d", "value": "24576:60ezmPUOplj80LJBgPURfw3edK1HaDYYMPNno5Nna24N0crRxZucjGa/3:PeCBpSsdRqedKCYYWwn5cnGq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995369, "uuid": "d205b3dd-742d-474f-8cf2-3efc147242f5", "value": 1382400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "19c5572c-1366-4c0e-a1ef-55ab557d0887", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06fc9e7d-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "ae5b5868-6b22-40d7-83e8-e0d5ccfb7cf9", "comment": "Malware payload", "value": "400b985788ac659b430405a8fd2522a8", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "9fde61d7-2194-40ea-9748-78d8ed927af4", "comment": "Malware payload", "value": "c5d5fc13ed83a2b335ba048e52e72133438b10c08a651d1c8307d9611815bb63", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "25978053-825b-4826-a536-8f433c613f07", "value": "T11B4533A1D5D05ED2A65BDD5093D62FE0F24A34280783D264739C480AC9ACABC7F7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "db6f897a-fdf6-4ddf-9eea-dc2012e9647e", "value": "24576:yRp2NeYPXOYnLsHcIh50MBkG4s/xKnLwlo3t38kEnKLb+wREErm:Ep2oYPeYL5Ih50MJF/PotMkEnNEy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995369, "uuid": "96b98010-241d-422f-ab8c-13b8021b74a1", "value": 1193502, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "3589612a-b5dd-41c2-9285-8635d489e671", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "070cd54b-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "07350235-813c-4210-898d-27a2f98808c2", "comment": "Malware payload", "value": "0778b9899321bef50cfa30e5b22985f7", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "602ca283-0edf-4c18-945e-a933d2d90ba5", "comment": "Malware payload", "value": "5beb414b5ea3951feb4925502f9b306fc46b00daf8c69d3cb070c83aec57a44d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "94ddaf0f-e233-4d68-9520-aab701520b0b", "value": "T1A05523C0A4F6CC5AB9CF7CB3D8CE121040B5E9297F029BE2EB581DF53A478C8954B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "661856aa-b8be-4c7c-a601-fe9a392478e0", "value": "24576:qHS2/yrPSyS8IOkmwG6UuZJ7C5GCs+LovF0RLtAb+LyDxb6UOPe5fDIlPFxPOC:j2weHt7CFod0W+42Le5DQOC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995369, "uuid": "2d5707c5-3e5e-4356-896c-3ae87207dbb6", "value": 1381888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995369, "uuid": "7e81236f-6ef9-49f4-bbec-7fcc973dae30", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "074fe4c3-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995370, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995370, "uuid": "6c3fd963-24fe-4cae-893f-179b84982841", "comment": "Malware payload", "value": "57f1c0411dea7686c89c909f6bc8bbc6", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995370, "uuid": "8e33fe50-c885-43bc-8251-323da634981c", "comment": "Malware payload", "value": "89b2d1d2926ee42ab819b8f05880c05f4388ada0be3b4b7ea28aa9b1e5f469f8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995370, "uuid": "37e9c3ef-784c-4080-b5e9-f5a7d2eb21fd", "value": "T1CD552340B41BDD5E63ABACE2F9FA3910817A5CBB7E47474283988ED6FCD3C4866C59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995370, "uuid": "83dc749f-600c-4b1b-a3d8-b79b5d8ef30c", "value": "24576:hOSCn0LM2TtDtBF8sxaMT840t077l7NDwK0KAhP6xWFX5q6:hOSC0LVHosxaMT840+JNUrFh6xqXp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995370, "uuid": "8df8570d-e8c8-4859-bdce-0edbe1cc0e67", "value": 1383424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995370, "uuid": "8fd27eb9-8680-4523-9eae-763d319fcf9d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b81b7af3-1b4d-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995426, "uuid": "9a72a053-abe0-4ad4-b3c9-308908d229ac", "comment": "Malware payload", "value": "9768b2fb77b20a6234ea0e46c85c147d", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995426, "uuid": "077e7d09-b4e5-49e7-bd1b-11dedfcf3c84", "comment": "Malware payload", "value": "329742d838d0e8eec8eba55dcea47cdea89584cb65e33d607b024c7a1af5958d", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995426, "uuid": "13207988-93ee-4772-adf3-1131fe6dcdde", "value": "T17F413CE309A0DCB8CD1D38CED291B55F5E2D4E070305706282022B673539906FF65D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995426, "uuid": "70cbed9a-c56c-4d23-b3be-89aedd738510", "value": "48:ZStVtIMBbFHavqguDcjD2co3QRdXpM29RCq:ZStVWMBbtguIH249R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995426, "uuid": "ad15b071-477e-4804-8597-85e94010d5bc", "value": 2184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995426, "uuid": "e55deae4-1834-4d94-985a-390efe32de4b", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61f4bb4a-19e1-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995427, "uuid": "21ab1ac1-f5d1-44c4-b446-6684f60d8df3", "comment": "Malware payload", "value": "9ef87fefc907086ecfd9f904772207a4", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995427, "uuid": "646903e7-7873-448b-8b5e-b4bb90d4d137", "comment": "Malware payload", "value": "1ee8cb4d24ad0180b584a6447e7f0df810b2ef61dac2bc9f202fe33729a4174a", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995427, "uuid": "95dcc6f8-ecd2-44e1-8805-4848bc3d22e2", "value": "T13164236B8E4B5CB4AA784958BB372F36B5630C10D0845BABFAE8B099C1CD7C81D57D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995427, "uuid": "d7ce6935-2cda-4643-a45e-d1f1db748467", "value": "6144:qArd03BT9GIQWThGmSe9LmpNkQjrmHeq4t0jfvBhAtdomA/4sGJNt0/SjeJCO83v:Nrq3yNWTh4e9LiiQjrOevMvf9D/GtpGM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995427, "uuid": "e11ee797-c016-4921-89d7-bdaf74aaa8a4", "value": 327008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995427, "uuid": "1d3ede83-6b58-4feb-98c8-6b2811c916b8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "298b86d1-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995427, "uuid": "9ea20e5d-d49c-43ed-ba6a-0c83a7b4dc4b", "comment": "Malware payload", "value": "ee153878c47c3f2ce0c0a50ab224bd53", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995427, "uuid": "8c5c42f0-4e00-4608-bde0-b7fe125285f8", "comment": "Malware payload", "value": "cc94ad95f5e47b754cb9e778a406b3ccaffa73455462fe01fcac0f930627177c", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995427, "uuid": "46135c71-a5a6-4ac5-855c-0f8fa40492fd", "value": "T147412C32FE2FA2470D3BC1134C32D542B80E43903652E6B0A695EAD5235B50D13F51", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995427, "uuid": "60f2f325-c60a-4850-8d70-6d28961f58d1", "value": "48:ZSSaYXt8fJZ3jGuZ9UyVF8dFybubD4DaGeMUaunGbbki8Hzzwg:ZS4XeJjGO78dgb+lGeMUVGbbki8Tzwg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995427, "uuid": "3aeddd0e-c429-48f7-94e7-94d473c1999d", "value": 2048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995427, "uuid": "b8d8812d-41c2-4800-ab61-4a320e556007", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "298c6f2d-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995427, "uuid": "418c9a81-0ce2-42c2-bf8f-2525342986b2", "comment": "Malware payload", "value": "0136de6b467cc0d0b364b400cb5104c3", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995427, "uuid": "9b1ceb55-9d04-47bf-9f75-745d27bc0e0c", "comment": "Malware payload", "value": "d5c16e9130f14072a4a30a25a2b5fb8be8dea2630214482a9fcaca8fefcf53fc", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995427, "uuid": "fb410bc6-ccea-4225-9f89-94e4737b2b8f", "value": "T16C413C83C3440B53DAB41277F9589D48C31FC9E8D27BE0502949E36A3A93D364F06E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995427, "uuid": "444fb991-58e2-4e62-a8e4-60881197c329", "value": "48:9fKIaOyfQa45hHSdJhdzWobkxLe4QHNrpvMxP7rwjOb:IIaNZYHu1Due4QHVpvYRb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995427, "uuid": "b55247cd-0727-4292-9add-f959e78188e1", "value": 2185, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995427, "uuid": "53f86887-9a78-41de-b559-5065eac9669f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29926ca8-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995427, "uuid": "a162027d-bbee-46b7-8d3e-608bc30a6409", "comment": "Malware payload", "value": "99b32cd5e5e64e0429b76d8d9b2ac1a3", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995427, "uuid": "afa07749-e6db-4431-9d48-898e6379a3f5", "comment": "Malware payload", "value": "5597e2e3bd2a2065cb27b9aeaa89d68b669bfbdad0d6402d90b42c4d3b9be49f", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995427, "uuid": "8802d1cb-7b5f-47d5-858a-54ed8d79572c", "value": "T16081D98CFFC030E04BA603D71E6F595AAB76C5D6611688A8D200F1E8BFA0A54F45BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995427, "uuid": "96bb669b-3cde-4ed1-a80c-ca9b640c2e4a", "value": "96:L8mzZUIKmOmMlup4W4KsJQvoAhS8nboukR3qhPXts:L7UIKvlupB4KsJQHdkR3GPXts", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995427, "uuid": "6a7a88f7-64c9-4f43-9b00-e81f5e83b453", "value": 3867, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995427, "uuid": "09bc162d-809e-452f-bb0d-f327ad971697", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "299ad97c-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995427, "uuid": "ffa43e48-a839-4003-8a3e-084e8c678436", "comment": "Malware payload", "value": "80c74d8cd0ffd40c1de676adf5a11498", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995427, "uuid": "96fb3a5b-1d8e-4a60-a26c-30cc8d92bf63", "comment": "Malware payload", "value": "d0627ab546aa43cb2c59b874b770cb50ab76456972002443533dadd3ba6ae43e", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995427, "uuid": "64e370ea-8afe-44d2-a4a9-85c937d56ba3", "value": "T18741F9C8664F38EAE3C9862AEB747D8F51100AFD27B313C0D71A5945512184734BF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995427, "uuid": "578d7b09-7b75-42c8-a980-16d6c53fdbc5", "value": "48:tmq1xstdFURTjF3gNZE+KbyN580NkzKzwou4:tWITh4/lN5rNMis4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995427, "uuid": "561c5789-c46d-4e77-80cd-01612280401d", "value": 2261, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995427, "uuid": "7052d8a5-d270-49fc-815d-018cb6da8d34", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29f4bf21-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995428, "uuid": "ae244d3e-6538-4932-a175-4a471cb0cbc0", "comment": "Malware payload", "value": "6bffe47593d2a3a238fd19b6642bdddf", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995428, "uuid": "8d5e73c7-172f-4571-a543-4bfdc2d2675c", "comment": "Malware payload", "value": "cab15f1001d279cc919673a82a82000460da02f62761d169cd93490c61b1de37", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995428, "uuid": "ebba35bd-eebe-431a-8f29-980050432655", "value": "T1B8348E8564C852ADCA5E1CA5138CFE660FD1F26207FD8A5C9C01ED32CFA9CB17B9DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995428, "uuid": "66bd00cf-ff8f-4aeb-b2ef-861d88b374f2", "value": "6144:R7u1EshJAcxNiB2P+D08XWcvUi35E2RzvjNqlgbwF:lu1Es8cxNG2PU08XWmUi35fRzjPbw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995428, "uuid": "7e465d8d-76b3-45b4-afab-4142ea6c147a", "value": 245248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995428, "uuid": "afc4772b-3b1b-4ff1-b5c8-2d79bad51bbb", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a1e617f-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1744995428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995428, "uuid": "afea4581-3f1c-4574-9a65-56ae6a8c26d8", "comment": "Malware payload (Formbook)", "value": "f1fb7323684401e2a5e3e5bae1e97b72", "object_relation": "md5", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995428, "uuid": "52571ba9-29a7-4d22-a6f1-932ff308c5bf", "comment": "Malware payload (Formbook)", "value": "6f3ee676d229cbe5bfa2d69a63513b3dc194f45f17f97e27f7c8fafb85e8cfdb", "object_relation": "sha256", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995428, "uuid": "a139d4b5-e634-4b70-9e1a-bd408a19b40e", "value": "T132C20D9C725432EFC85BC472DEA81D64EB6075BB831B8217A06315ADEE4D89BCF141", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995428, "uuid": "f028becc-e8dc-4d16-b3b8-b59355ab2402", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995428, "uuid": "70f50b88-f184-4068-9281-d0eb458e150a", "value": "384:kD4hKsFGsHbSTFn1FfvMO/CqqKmVyE7lW3fiE/MNuQ:kD8xbSLTmVvZyfiL1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995428, "uuid": "304a59e1-4b36-4c3d-8652-46d6614b162c", "value": 26624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995428, "uuid": "68fac574-f041-4907-8dc0-4612e4ce4461", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a1eb3e9-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1744995428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995428, "uuid": "75ef8bf8-07ce-4d07-be32-e36d7e9a41d3", "comment": "Malware payload (Formbook)", "value": "704ff9d519db8b70ee5dc9e3250d16fc", "object_relation": "md5", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995428, "uuid": "6182b316-3639-4284-ab3f-7b461f102581", "comment": "Malware payload (Formbook)", "value": "623a8527dff3a91af1f0335ebb43d8ac7254922f3668d719943cebfcd4ad3afb", "object_relation": "sha256", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995428, "uuid": "f98980e7-48f9-4a2b-8967-7f83641ffee0", "value": "T1DB53E1155AC8BBFBCB6E570B817DB60D5320BF2F8092740CB763AF626B7B904110B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995428, "uuid": "a9cb5d04-9c84-495a-80fd-d136ff7a6cf3", "value": "1536:exZ84NaFar49x5losTHm4jdBUekcICJ31iQsns2263ilpww9:ev1wcr6fosTFjdBUekcVwtF3Wpww9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995428, "uuid": "90ad7a97-67c0-44f3-b713-820a277b9c09", "value": 64500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995428, "uuid": "11939ccd-d4ea-47b2-b666-b2192aea41b7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a3698f6-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995428, "uuid": "ee4b87bc-34e7-4d4c-a75f-bf115cded072", "comment": "Malware payload", "value": "52629a0df0b9b976631b9e7024d4caaa", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995428, "uuid": "adaac5f9-9f16-441e-b14f-47906dd9b355", "comment": "Malware payload", "value": "ef3cd00d1efd66f090543cbaf65c309cb31054fc0239d78615a37ce8a48ea1e4", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995428, "uuid": "9fb5594b-a4f8-47da-8bce-482afca35b44", "value": "T1D1349E605B94DB7EEDABD00C1ED25DA989833C6DAA67D3C2912C32F15B0CD30B51DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995428, "uuid": "05e113e6-2d4d-4ed9-9759-a7c64a922f08", "value": "6144:27flvHohH94CvT3uzUyznbrNZpiQ2QfQAFJueHc:SGhd44T3uzLnbrNZpiQ2nAXueHc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995428, "uuid": "62b45e39-a880-4c64-b9fa-28d41f59f04f", "value": 246272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995428, "uuid": "efa19667-3b5f-489e-b7ef-192d23e00e87", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a4a2b38-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995428, "uuid": "e6a6d1d3-36aa-4828-8d71-c61ac37da536", "comment": "Malware payload", "value": "ca56a586eaf9b7c33c668ff6d4fefacf", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995428, "uuid": "d160db33-21cd-43b1-bfee-c30f3b8f785e", "comment": "Malware payload", "value": "1502c35e62aa96e6ae528cd2b672987c4a831f22cba70c2686929e6b9d52dee4", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995428, "uuid": "37f8d096-22db-4029-870b-301b057ebee1", "value": "T15555337D38805B77C3966814A6C21779309CD616F2A0C1A8DBADC3798C5CA7A731DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995428, "uuid": "cef2ec54-71b9-4793-aec5-9495b69b8964", "value": "24576:OxSS6L1PyEW5GQiq/xwSq7IINFdHICaKuJA3FGmwvTe9KvmTke:Ox5y1aEAiq/KSgImFdo2uAFFwr7mTke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995428, "uuid": "14d8c24d-6733-471a-ada3-a25e3e52ef16", "value": 1383432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995428, "uuid": "74670176-37b5-4eba-b65e-f4d38dad83b7", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a62316a-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1744995429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "e3f50bb2-f06b-4a41-85cf-b6190c973851", "comment": "Malware payload (Formbook)", "value": "010e0d1f0df6894e6f25b534be5a1688", "object_relation": "md5", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "41cf75c6-a144-4ac8-8c5b-45568f20b112", "comment": "Malware payload (Formbook)", "value": "641647cc48260fabe6d794976f2f36f06e5508a22dd2cedff610b55db1781b00", "object_relation": "sha256", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "5aaabfba-87b7-4aa7-9fae-d3531b0d209b", "value": "T111E401258AC86FB9CFAC161990FE1A1D93E05A8A4547B48EFB33BC07BFEB54441171", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "30f19af8-bfa6-4474-88e3-8c634c41a866", "value": "12288:g3iOuGEzGhsAcIk9CjJfe052TTlvEzhsLhAQClokbo7jsZDzk222:gIWSnIkGeM2ThAiLiQmQ6nku", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995429, "uuid": "8ae9d633-5004-49d1-8deb-bdefb0ef4d4c", "value": 708940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "d7c4a5ca-b082-4547-a98f-8a1a37e4c024", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a623fd1-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1744995429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "673fda59-1cbd-4e15-830c-a9ce57407838", "comment": "Malware payload (AgentTesla)", "value": "a96421d70034ad5469da944d8d542ae7", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "6c9ccd53-ef14-4035-8119-d9ad04d73560", "comment": "Malware payload (AgentTesla)", "value": "2561aef4855dc12b49de9217c34c613ce9cd3767981685734a82692686dca3da", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "88b286aa-84ac-4cbb-8ff4-300f5a056a19", "value": "T117D402404EC83FB9DEAC592890BE071D53E14A9E855BB54EEB23FC4BBFEB940050B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "c87c9f84-10b7-4bbd-9b68-3b8c6413ecc4", "value": "12288:UFOaxMiDM7atven1H30AUeCaq7Fsm0UtJcgMS3OG:TaxvMmdI1rnqJLcgMkR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995429, "uuid": "b98f2212-92cd-43f3-a0de-719ec1e082be", "value": 626420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "44c44ea7-690e-4a71-ac4c-4ff300f1bdbd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a7480df-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "ef5e592f-d6a7-4c40-9329-82f8a5d87b00", "comment": "Malware payload", "value": "905e75ae55cf18d3db52f5b84c8e202a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "e4c1f81b-9487-4fc4-a115-a222b63b08fb", "comment": "Malware payload", "value": "5cd2f2d363981cd9012dac5a31e447bde365fff8511aae50e5f9f20e65e1dab4", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "bb192c54-35a8-41ec-859f-2b2093713a91", "value": "T182553386BD5C9A17BB5056DC8860A476DB602AE1E33DC13539FC7B5D97C4F2C82803", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "34748adb-51c4-48b2-b264-3626314826eb", "value": "24576:bFK/TVZ6xJuL3jLB0xrnbNz4GDj/wlCKBScG6LCKu2FGWkN:0/VnaxzbNDwlCK3GoCUFGWkN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995429, "uuid": "26d508c6-edf2-48df-b2e0-41c5a2f13a59", "value": 1383944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "43469ccd-ed0f-4001-a7ed-330f19724e45", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a825832-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "32c038cc-232e-4dda-b575-3f29c565f0ed", "comment": "Malware payload", "value": "22d08cb8d872cee14804165367fc1344", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "73dcf262-47af-4834-acd0-3fe2f0046a2c", "comment": "Malware payload", "value": "86bc527b15741c3ad10000ca866f6f0128efa5644bbe33cd3462b53638a6d6fa", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "ee4759ac-a937-42ab-ba85-3049ed4cffd1", "value": "T11C052312AD3B66B6B01E23A1B6AB8CD45D35C3E019F45D4FDBA39CAA623D77DC045C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "4e564943-ab22-4cd0-bc5c-789c7ea2757a", "value": "24576:wlRPURjgdz8QpTYPfYvaiFIm6zCom51JA7SP:gRcRjmgmTYPfYvhEuomfK7s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995429, "uuid": "0b700402-76d1-44ef-9f18-b56321227d4a", "value": 860712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "818b98a5-29d4-4308-ab6c-2127d0890bf2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a8a2410-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "8a7f3dd9-bedf-4765-940c-678db350081a", "comment": "Malware payload", "value": "c45de5c0a948a87f4628f17d6a149663", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "0fd46059-28a0-474c-93bf-4abdd095aa6e", "comment": "Malware payload", "value": "253c0eeb47f6b50c006511e74d01c2478ec0030670dee880f3aa607e550c4e71", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "e264c9ba-7810-41db-8d07-fffbd2e26894", "value": "T19E55233D8CDCDEAE250831CD8EEA6B3610C665B74F85E6744F04E8E8765EB0CE46E1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "d677444c-9b5a-4cd1-932c-632f9de5c603", "value": "24576:gMLNrvWZXktxwLsYhTJAQBwD9fAmf/Bp1WKvM8IzSH+jfIe+AN7FsjAU/gVkX:5dWXUwL5bA3fb1m8iE+PfNpKf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995429, "uuid": "d07015b0-1a14-4413-bd35-c66449333ccb", "value": 1383424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "9f40bd3e-b693-4964-ae63-02eb0d440f0c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a8ec053-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "1d06180a-1cfa-497a-8218-12452be5b8a2", "comment": "Malware payload", "value": "e56a4123e5c977689e305db4f2d4b262", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "05549b34-7af8-4bc6-bd48-8091b585aa5b", "comment": "Malware payload", "value": "baa65d777850762eef52c27858465b056d533e6f02737c443f6aab00039c73d6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "7bc768f0-3a9a-4ea8-94d1-bf49c4d9fb7f", "value": "T1BF552340AD0B8DAB11A66CF7D9BE1531803A54267643CBF3EBDD8CE1F5DAC84694F2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "62a01de2-e34e-4dc9-b0c0-ad11a04ea0a3", "value": "24576:PWqgVFWfk/47x/yFW+lzunu9TlTb9fnCyB35rpuiqA7AcP+V7tY7pDPozjU:mWMg7x/y469TlTpfzBJH85XY7Qo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995429, "uuid": "a8859460-c3bc-4287-b8e0-b83b63bac0c8", "value": 1381888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "e041cba6-e2c4-4a64-a56b-d0fad85ee1db", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ac7afc6-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "07a1ba44-dcb5-4b9d-a17f-0f45436607c8", "comment": "Malware payload", "value": "dcbff72362e86a2e56ffe1a9dcfe9664", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "ad1bfb20-76b0-4982-b720-922ba0b410ff", "comment": "Malware payload", "value": "4ab0253d94c47228bc33b09ef529102158e891a9428a6d314e4f76b6768faf05", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "ab42e05f-687b-4db8-8935-8f69c6aaf45d", "value": "T1AB55330241ECD971BBA5AC2388AC31495DA9C97306EEBD65A04F656C4367FCE38CF3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "49497b0f-cd06-4335-9ecb-514c9849dfa8", "value": "24576:3BeGjQ11dNVRsCSrYjtmXozv//ej0pbBM8gucr8+L59ByW048ZZWsA1hH4I+M+wc:RQ3dTRCrycevJ1BM8gv75ujdfW73YIuX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995429, "uuid": "3070e6fa-a44d-429c-9b78-ae1e79911172", "value": 1381896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "e58b4a50-295e-4196-8c2c-9cb1f23be1df", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ae19f2c-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "8b5db8a2-3e7b-41fb-8404-42fa5ee8c5eb", "comment": "Malware payload", "value": "802e669a0497e6f11503611fe6431a1d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "f942d0fb-0692-439a-bb9f-76bb6cc93c6d", "comment": "Malware payload", "value": "b3e9fa7d089375ce038bb10d46824b1ee964ddccb44efb069d2ff0dafc61792f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "45d39ce2-4e52-496a-a77c-1896ea9e380f", "value": "T1DF45336AB8D227B9610C9B04FC1BD61983EC64928803FD306B9D44FBD52B5255F7C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "312f5343-bcd4-45ad-9ee9-2f476f2ddb91", "value": "24576:WALsgfCM+Ld1yiHA+Ji1s+6B6X6G+Ofa5fyHSN3sQ5+oTceLkwIxXC6+RlbD:1sqCM+Lxi1h6BA+RN6Csm+oTjLkwI0Fj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995429, "uuid": "b5482647-b9f0-4cc8-b035-35529333d86f", "value": 1195795, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995429, "uuid": "f02bf16c-455c-4c29-8c8a-2e10a086be44", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b522081-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995430, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995430, "uuid": "cb29e62a-c857-493f-9c98-bbbb3240eaa2", "comment": "Malware payload", "value": "cf3c441b35f19c087f4b91fe10da75a6", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995430, "uuid": "8e566ee0-180f-4b5a-8c96-c9cf1481ece7", "comment": "Malware payload", "value": "09162c4d4f584a257aaade9a940625c010e5fad60974518464502a8c72a52091", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995430, "uuid": "acf5739f-1e9a-4ed3-8185-d03e97921a28", "value": "T16B5533C68AA887F2C5C17B5596D60BBAA334F64DF3583F8A81CD52BEF6390588F710", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995430, "uuid": "30f8536b-72e3-4c27-90d8-fb07c4ed5d3d", "value": "24576:SVivMdUfILc+INBgVnZ7UThFIrREz26VMSplc9+j6ib+cW6recoWlFR7huit:OsTic+IfsVU9FKhSp6Na7W6KpYFRbt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995430, "uuid": "75563266-0156-45ca-9b17-7b54a7fcbf88", "value": 1381896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995430, "uuid": "80a79c92-971c-4b06-bd66-765d8037758e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4201b5a1-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995468, "uuid": "b0e5d47f-b8c6-4f2a-b064-63035655febb", "comment": "Malware payload", "value": "02ca886ee37fed9fb155a1d54a315c8d", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995468, "uuid": "65836096-9dee-4f2d-9277-61478ef4500c", "comment": "Malware payload", "value": "b65d7ba55a9fc3eb75439c7e4203091b94ad22ddbbaab7af0d0b300180ead17c", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995468, "uuid": "4548da30-a39c-495d-8615-4c08c761c8c7", "value": "T1B55833DEBBE4290BD4AE11BD8F5B6176ABF0130814983A2961C1E6FE3CF1D063657C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995468, "uuid": "8331e7df-30f5-499b-85d4-7841954a5364", "value": "be41bf7b8cc010b614bd36bbca606973", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995468, "uuid": "eee0235b-d1c0-4a2e-a809-5d8159dd4c9d", "value": "3145728:G/cbcWW53vZp4TXX5sf7S6lYyu6Fg4mEwxG1h4Tf9uZ5dxnX:G1ZQuS9TTG1hW9uL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995468, "uuid": "6323473f-c5bb-4718-919e-7b54531cd0a6", "value": 127086528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995468, "uuid": "dad9aba4-d375-43e5-91a9-daf20e48525c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22eab4d0-1c77-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744995846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995846, "uuid": "9fe51915-579c-44c9-b0e0-9fd15d71a91d", "comment": "Malware payload", "value": "dbb8c8935b39160c6e16fb7ce21ac59a", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995846, "uuid": "abfee073-eb64-47de-bbb6-86de9332a831", "comment": "Malware payload", "value": "187d9bc5bfcc597cdc63e450c1629216b6eaab80fbcee0fc45ebf7b76dc011bb", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995846, "uuid": "200adbb8-813d-4383-aa54-4ecf60c0fa4f", "value": "T177D40268D2DEFA841B15F3C6AE59D9C01DB6273BDDC050786DEB861EF0300966AF0D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995846, "uuid": "929177f6-7986-44fa-9bc3-4d46a64fa365", "value": "3072:0IIIIzIIIIzIIIIzIIIIzIIIIzIIIIzIIIIzIIIIzIIIIzIIIIzIIIIzIIIIzII7:8z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744995846, "uuid": "6c85adc8-ca40-4688-97ab-e48afbd58224", "value": 602937, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995846, "uuid": "467140b8-8434-432a-8cb4-8c778830b14b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdc7f4df-1c77-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996105, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996105, "uuid": "aedaf6bf-d530-45f0-ae93-d176fe1ddf06", "comment": "Malware payload (Mirai)", "value": "a5c0b44636c21977c8215e4cbab1d476", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996105, "uuid": "d9486e90-c4b9-480d-a826-b3de013ad441", "comment": "Malware payload (Mirai)", "value": "d0470863ef6035d3ebf248b2006972e9d43cbf38dc248f6d932bb19e0a847fd1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996105, "uuid": "6cc55740-1fc6-4121-9ce0-2b76448b712c", "value": "T13673198BF801DDBEF80AD77B0457090AB670A7D142835B366757BAA3FC721951822F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996105, "uuid": "197dfecb-cb88-40b7-bc91-ef7892c8f2ae", "value": "1536:X1M9x9b+3DAN3dgUIA5ErS4dBzZv82roCBcNG8Qf6VVHL61ZAvn1nwknh9:X1M9x9b+3DAN3dgUIAme4dBzZlrrR8om", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996105, "uuid": "dd3d7de6-f62b-4e2c-8e11-ae77d6ce5806", "value": 79300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996105, "uuid": "58a64832-2ce8-44b6-bf1d-2e9cbc27d836", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c68acf4b-1c77-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744996120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996120, "uuid": "55baa4d8-7b41-4a66-9d0f-7f07e667deeb", "comment": "Malware payload", "value": "085edb99c7a41ef9e4935dcc17c0acde", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996120, "uuid": "9678e988-34e6-4eff-b64f-069e948dfcb6", "comment": "Malware payload", "value": "0c91b4839e88ebb6034f264d507037ddbe952513c856f07d492657bc5e301156", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996120, "uuid": "2ec4e17f-ae0a-41f8-93b1-0ed7b545e767", "value": "T18DC53318D1830C3FE66EC034A7CBFAEC776E2635129489C0830479B7AB6B49F5B55A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996120, "uuid": "3e962be8-1182-4609-9055-b89390057a7e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996120, "uuid": "824f33c0-1ca6-4518-bd8b-cec61ecca00f", "value": "49152:UPB85D2m1nkooxUJh+sSHAxBvfMjyru3xvL007DG9GaBQ93e73fmjTR:+M7kooxAJSHcBXMjT3x007DgjQ93e73e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996120, "uuid": "a60979bc-c83e-4423-a8c4-fcf08de93bc1", "value": 2505216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996120, "uuid": "6524da82-1bbe-4e44-bc79-4e9cf4942853", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "199593b0-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996259, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996259, "uuid": "00ed1307-9057-4f35-ad24-048a85d1baa9", "comment": "Malware payload (Mirai)", "value": "097314c8ab91b447671ae7c0f1458489", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996259, "uuid": "55a7a594-ca57-4c8a-8258-ff0d80345d84", "comment": "Malware payload (Mirai)", "value": "df215350b901d201a7c6b3be956eabb135a0196b5e2f58e47d218dd310d84e2a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996259, "uuid": "1e3fd891-d03b-4dcb-8a88-ec417faa9966", "value": "T1F772C1F140D1A863C530A8375DB5C0CF774617FCE2E6B22A16184AA8B9C924B17BE5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996259, "uuid": "a5e7c9da-f515-4324-b47f-6f87b955b45b", "value": "384:qlhcWdBZMFvcNrhJ61ok8pTeehLW5qSNO8hymdGUop5hXt5Y:qlhROFvMWa/xLWMSNO8s3UozJ4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996259, "uuid": "88a2776d-5283-4b19-a51e-835404dc01d0", "value": 17452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996259, "uuid": "8a7bab9b-fb47-4be3-add0-30a1969a17cf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64ae4c85-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996385, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996385, "uuid": "42105073-8b91-4187-b14a-64280ae67924", "comment": "Malware payload (Mirai)", "value": "3cc5b92688ae2af62149d641b004af1f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996385, "uuid": "400b83e3-eedc-48f3-afeb-7756a1bd9920", "comment": "Malware payload (Mirai)", "value": "32a10f51e65070ee439ad182e62210ee4c3a1bdb195e75c3009d085bcb7a21e9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996385, "uuid": "bdb8b608-22e7-4bb0-afa9-0489645152aa", "value": "T1F2B2D0BAE729B827D99F7EB8DCB601A7F0FBD856166CD7D6F2C4108F1162140101AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996385, "uuid": "e9645bc8-5aa1-4443-b48f-d43636f3af0e", "value": "384:Q21iu3gk5Baaz7LAwyRQgePTNxvQTWf+m7s96UIoXk7k07eJHrJaciiFqcJ3:71iu3gIMa7wQg+1+YtUP7HyzsJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996385, "uuid": "6b75b436-f305-4018-bba6-0b806708ee34", "value": 23408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996385, "uuid": "8e6c4ba5-7e63-4cc1-8ccb-dffeb703127f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64b25c8f-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996385, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996385, "uuid": "4095ef4a-8c85-454d-ac68-7b36e2d918e6", "comment": "Malware payload (Mirai)", "value": "0cb4f19e78d7946dcae01099ab7103fc", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996385, "uuid": "cee922fe-e554-420e-8763-8dddd498bff4", "comment": "Malware payload (Mirai)", "value": "44efffa31fe67aebf78dfa34f8f469d91bdfae36ec9da59c15e67ce8237cc095", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996385, "uuid": "408bd31c-c4a8-4a8c-8972-dc532a686741", "value": "T170118EDA115881BB0851AF8461AB84956418CFE07C510B7EDDDC08F351CED68BB9EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996385, "uuid": "83579165-63b0-4c93-a7b5-40ec0be4c12c", "value": "12:6hGunhOhgeAhhLhTmKLhIhhtK0qhJdkShzw7KxhwBxShT7co:oOw0T7K667b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996385, "uuid": "303ef272-d1c7-4393-97c5-c461869acb4f", "value": 900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996385, "uuid": "36325bf4-b4d0-4338-95bc-7b6b9a1c9cea", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64b819f9-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996385, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996385, "uuid": "83d9e86e-405b-4ef8-bd1e-a62c25b76971", "comment": "Malware payload (Mirai)", "value": "eeb26db0260f1ba3e916c185640d0ade", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996385, "uuid": "b3a5733f-b1a3-4cbe-86e3-70d469cb1c68", "comment": "Malware payload (Mirai)", "value": "06c8b30e38e818a16a661ea7554c468cb577c8c30a56de571b006131d3ebd4ea", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996385, "uuid": "b28fec38-6a81-4693-aa65-276266e0bd85", "value": "T16FA2E1227C5EBD62CE30847FF5A58683164751EDE1FA70320860C42DDA9AA0B69B47", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996385, "uuid": "342e648c-6282-40d6-a7c2-596003e7488a", "value": "384:BxpbJWtS9rRxLmBdSjS0T640etj1zc3Yb607Z4u4b3sM1QPLhymdGUop5hW:VstoNIQRT6yhzl5t4u4b3DOjs3UozE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996385, "uuid": "ed4a3235-4c46-4e7f-ac89-e1fb6cc451e2", "value": 22480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996385, "uuid": "866a6f59-8497-49f7-b335-87a4757d7f13", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64bdfe7a-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996386, "uuid": "a414e7c8-714a-4f29-b1e4-8b8c50e96700", "comment": "Malware payload (Mirai)", "value": "6d4053b9eeacca76419042d22165ba4b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996386, "uuid": "a92bbe77-6bc9-4ebf-be14-158f1f936d4c", "comment": "Malware payload (Mirai)", "value": "cc556cc65072e4d8f45e8180899df7fec0af84b7cd5dc48f9f2779cb57f8fa02", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996386, "uuid": "fac76a00-d6cf-48d6-a111-8fd0cf9c6fe1", "value": "T1FAA2D0B098A8BCF2E5E54C74DA2898C7365B17EFB6F63136401093D03569E0326BE6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996386, "uuid": "820e2773-b06a-4fb4-a86c-3d88a87e7aca", "value": "384:UvLDrdmylrob/tGMU3PXqHZXr9tb+kueozGqpbhymdGUop5hR:kr9O/tnUfXqRGvp9s3UozD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996386, "uuid": "c358eb3a-3833-4de5-9c49-3c159b21f5cc", "value": 22488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996386, "uuid": "af5e6665-6cbc-4ca4-8e3d-7b983298ec2b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64c0e17e-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996386, "uuid": "4b7d8805-9910-421b-be52-3be71fa5437e", "comment": "Malware payload (Mirai)", "value": "69b4396402c89cf185a3f7231d0c4722", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996386, "uuid": "d111d21e-5f0b-4093-b3b4-4f29fa6b4621", "comment": "Malware payload (Mirai)", "value": "011de2c3565a14fcee7260c69e88087aeffaf5452b328eeaee1a5d9561c7c306", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996386, "uuid": "63ef29da-e5a4-4f11-bee4-0a937e24ebd0", "value": "T13AA2F1D1600A506DCD997572927EE5FD8E740DE4291FC3CC52589CE0FEBF28618768", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996386, "uuid": "22a6f733-d188-4fe2-b848-e4e44afcab4f", "value": "384:MMdplEZl/cqjb5ax29IeedMHh/T47vghRO+ott7xf8Zvtl3gRzcU2A1C6rLqzbql:JG//fH/gOOgh0+otbkdDaCADyFry", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996386, "uuid": "6d5abd7e-34d5-467b-8298-0864f58584ad", "value": 22684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996386, "uuid": "b62bec34-bf2a-4e40-949a-c3742aacb0de", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64c5b8a6-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996386, "uuid": "dca6ab14-fd44-4732-88a3-877d7a19a358", "comment": "Malware payload (Mirai)", "value": "e453172b8ff4d8027c004d18d7a637a5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996386, "uuid": "a16c1c4b-d380-44da-94d8-3569bbc9bd3e", "comment": "Malware payload (Mirai)", "value": "1affedf95837c7ae14673913bd6f3cee9d7b4fc3d82f5c58ee362fdf60a768b9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996386, "uuid": "c13c5de2-78a5-4cb0-8d8f-56b972885998", "value": "T18F336D35B9792E57C1D8647A63F3476AB1E6124F24A88B1D7D760F8EFF60880A40B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996386, "uuid": "eb980d14-27aa-4021-abe9-b3b171f21496", "value": "768:HCUoEocFlx6EMYW6otCXmL+i4dWurjZVc1HLJilO+d6bLo/E3Y:HCUvocFlx6dYW6MErj6Jilc/o9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996386, "uuid": "3a93233b-b9c7-4131-bdf0-efcc2edf4b6a", "value": 51688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996386, "uuid": "c8aa64d7-d6cd-44d8-8fbd-b3d2a1aa9ce8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64ca4343-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996386, "uuid": "addd94bd-cd23-4b52-81c9-3e55fbd91ec0", "comment": "Malware payload (Mirai)", "value": "b7c115e5e5b0ff9dce86bef11d6141d1", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996386, "uuid": "dcb9960f-6ed6-44d3-ad58-d7c75cfbb4dc", "comment": "Malware payload (Mirai)", "value": "8f61a9fbb04ba5462c588535905f7aa29c5a68d0292bbbe75d70e68eacb42cc6", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996386, "uuid": "66526568-307c-46a2-93b8-b5d0e36a5437", "value": "T169B2D0CEDA44BF8ECF5C6EB579DC0A30CE21F290375B8B5DA3654D8C6A26405706C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996386, "uuid": "d76fe5fa-381b-4e6f-ac86-b0cc25c2c276", "value": "384:EIIqZOmAGx1GvjKY/CxW+Ek/YLmSIkAz9qS8+g4HvKGkV3yFvHx+oTRWGVCz0Nvf:ENfG+LH+INIJz9qS/RvK9YWm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996386, "uuid": "64fed11d-a836-4653-94a1-e61510e7d0e1", "value": 24596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996386, "uuid": "a0eefec3-6b87-4355-8b94-dff882e9f991", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64e1020d-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996386, "uuid": "fb86f8f1-5c97-4c22-8968-93ea121d27fa", "comment": "Malware payload (Mirai)", "value": "891b92c81e37529d6d865bda7cb84017", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996386, "uuid": "1c0573dc-fb9a-4e61-8384-6287aa85c599", "comment": "Malware payload (Mirai)", "value": "575aa839674f99834acc40e530309daee3c114803f899ddb67c254dd1bd4f837", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996386, "uuid": "1c482a17-930c-489b-acb6-718b968648cd", "value": "T1EE137D66C8995EA0C2164378A234CE3D5773D908A1A76EFA4A06C265D047FFCF14E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996386, "uuid": "f49d34bc-bb04-47b4-ab45-0b376185f491", "value": "768:LEMtIexmiB1RuGB/gLXCjoAWZCBNCINkIi/:LER0BFuGB/QPJMNCINkI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996386, "uuid": "d53e4dc1-51cd-49d1-be1d-61a557f741b4", "value": 43892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996386, "uuid": "1806bb79-f0cb-4b9d-957f-e68816eb4c33", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64f04279-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996386, "uuid": "86e1ca86-a416-4b59-955c-5e5800a51f53", "comment": "Malware payload (Mirai)", "value": "3f7cc5782daaac97698a3e722af769e8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996386, "uuid": "e50b774d-4925-4df2-8d32-31e10770663e", "comment": "Malware payload (Mirai)", "value": "17aa42f1c34f631423b03251e7d04e2d43b14d16481c5f6597e5f0b2567593c8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996386, "uuid": "29630ea3-6168-4dc7-8c1c-c24000655edf", "value": "T158332BC6B400FD6CF55BE3BA8623490DB930A25150930B27B777FED7AC321A85E26D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996386, "uuid": "822c634e-2c77-4bbb-b2b2-c2415f8ee350", "value": "768:sFexuainwCrges7wedTvkA73R1jO0U3++tcnrv23rySMgPdeE2ibM6y1S87yI9hQ:ioyrgJdz1Te+o4rv8MgPdqibM6yA8mIc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996386, "uuid": "7df213cc-2292-4abc-95a6-c4ac9a324066", "value": 51204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996386, "uuid": "b4ce3c8d-c5c3-4988-9fbd-6de0c28f431a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "881f22c7-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996445, "uuid": "f48764e6-1a63-4634-946e-d765fb6b8fa7", "comment": "Malware payload (Mirai)", "value": "b720b80c34c53f07b788d1133190d273", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996445, "uuid": "9a0b7162-31b1-4526-b47d-2480e0ed9a7e", "comment": "Malware payload (Mirai)", "value": "a71d8c0a60882039e9cbd3cc99249851144f1dd4671df20a4f70c00c6ef16b13", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996445, "uuid": "ea059ecf-daf0-41e0-82c6-0893324a99f1", "value": "T12EA2C020E256BEA4FAFBEF759648D1C0B3A20F5F3786465212E69F00141C85BE74B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996445, "uuid": "e9a53da9-2f30-40f2-a523-6075d8f61e97", "value": "384:p7nlYJrOcCJ6NLORBLptSmZtoRo24yk7ElIB7ndNZW/G3M4uVcqgw05VxJYRK:p7nlWOBiyfltlZtoRwgl274/Gc4uVcqU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996445, "uuid": "ac688793-5aae-4a25-97c5-32b05ca61d8d", "value": 22048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996445, "uuid": "3e5ad86d-b68f-4ef0-85b3-07672bb8c0e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "883b39ea-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996445, "uuid": "a29d15bf-9fae-4343-93b9-ae7dc061b58d", "comment": "Malware payload (Mirai)", "value": "9a73307959bc3be10b8cd3a1e69024af", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996445, "uuid": "f6e38bb8-f246-412b-bc3f-bd8a27556d80", "comment": "Malware payload (Mirai)", "value": "7ad4f3109993b6d33a9dd1b28db54ab512149ebae7f614d60325e2e956724488", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996445, "uuid": "cd307189-6c20-494b-be2d-e15fac2dcece", "value": "T1292301D1D6D3B4C6C7852634F29849CF6D85B3B680B46E7A3A01C9447EFC4E739B81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996445, "uuid": "82f3f076-5889-44d2-b81e-da398de899bd", "value": "768:YUpQDLizbAA8fga6oh/0fKdvznD3jRuX+3Eo+2YvlIlUfh9q3UELsO68m073w1SY:YUpOOcYaN08vzzjY+DYNIPLsOdb3wQxG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996445, "uuid": "cc2af754-2d92-4f18-8114-4b8f9c195a2e", "value": 47348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996445, "uuid": "847bf310-7c51-4ca9-a12b-9502bfb6481e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88411c8b-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996445, "uuid": "de96182f-5b23-4c75-b6ba-280b42eca551", "comment": "Malware payload (Mirai)", "value": "0c2b2a7e2bb542d85f52637e9b524ad4", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996445, "uuid": "0910f933-6e4d-41a4-80c6-f1c8db9a1151", "comment": "Malware payload (Mirai)", "value": "6a71605c669b380921fb0c94d4ccaa21f7b18ce55c9bdbc1246c4d8af4bae432", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996445, "uuid": "585c6e90-4180-43c2-8545-b20d289d2c0f", "value": "T1EAA2E06A7C31ED3AEEA1A2318ACC7D8976A21DB9825E531951CB550F7BCD10DE100D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996445, "uuid": "666609d0-1d51-428b-8797-6bbf8249f15c", "value": "384:MwwUZbstzjI0eB2owQwcOIBuiu044CqPV3Ne2R2GCEvNIv9sC6SudHNyn:nYILB2GwcjuseceU2TESsCqUn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996445, "uuid": "247331f3-1bde-439e-b155-ab5c464aee87", "value": 21988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996445, "uuid": "1d93ced4-1415-4c64-9bca-6d67745ebd8a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d054d1c1-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744996566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996566, "uuid": "c91f22ac-51d7-4747-b2c1-b10d8dc3331e", "comment": "Malware payload", "value": "cee47328abd5cb35a4c13218006fa526", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996566, "uuid": "f103fcaf-14c3-4e08-b2d0-026b31b22131", "comment": "Malware payload", "value": "b7c85dd11c25cfd7a759a63a05f4d2981b9ae3a667d37a55d8a73ac8d59686c9", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996566, "uuid": "2b315a6a-a6ae-46b8-bac2-ef8f28e1265d", "value": "T1D83176CF61F649B46DE0E82732798800BEEED5CB19CA5F5569DC38E640CDE04B8096", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996566, "uuid": "04cfa6a9-0f1c-4838-bbfb-aef600a4db8e", "value": "24:1i4l7fi4lvvi4hi4UtByi4eEi4isi4OUi4KSwHRYi4lD6Hai4qMi4GUi4od8i4JW:177f7XjitByvwswUe+7D6HaL/TzW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996566, "uuid": "f89540ed-f1ee-4a42-a2da-dadaee638a47", "value": 1692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996566, "uuid": "014073e0-45aa-4bb6-b9af-a2e8e751d439", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d076e2ac-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996566, "uuid": "b6673de6-3edb-4d4f-9787-7a9564de9e23", "comment": "Malware payload (Mirai)", "value": "f315572fd0bb3861cf5b74f69459984d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996566, "uuid": "7964d16a-c571-4c20-a877-2e4e17624f5b", "comment": "Malware payload (Mirai)", "value": "af20419835f6b31a8879ea12e1101effe7277a7781ba85d1d7893640a21642a6", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996566, "uuid": "7ed49853-fc43-45c3-90d8-d139f3f2269d", "value": "T11DE32945FC54573BC2E23BFBF79A82CE372A5764979733115A291FB02BC17891E2A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996566, "uuid": "cab1de7c-dca4-4ad5-be29-7585ac3dd6ac", "value": "3072:S39urvnp9QNSgfJ7ORqQRz9wDwnDZ/RChRAyeA2oodm+SVmxvYlqijhH/uD36I:S3evz93nl5CPAyeWExvYlqijhfuD36I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996566, "uuid": "12c597c7-1c03-4f32-8752-b96d6494b241", "value": 149946, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996566, "uuid": "a13f8645-ff80-488f-878c-b72ba6cc2457", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d07eb1bb-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996566, "uuid": "983e2ee0-e12e-4a6d-bce1-f5f68c71cf4e", "comment": "Malware payload (Mirai)", "value": "ddb75ed51cb7c72e3c12beb9ab08303d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996566, "uuid": "16915ae0-4b80-423d-89b3-56a085e14a31", "comment": "Malware payload (Mirai)", "value": "56fbce37e528ae21202454f4513889c1abd1a7813566174fb20e9ca9240ab398", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996566, "uuid": "175b1589-43c4-4770-b923-a53eab1e798b", "value": "T10AC35CC3E780D6B3D1930AF612A79B140271E8371A5BCE95F34C3CB49A19689F7266", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996566, "uuid": "bf8f4947-be6b-431f-b4e1-c2c793b401ac", "value": "3072:myjUMIz4um4UJB1XuFEhQsZj749b28gARR2v69ny6JP/KTiFi:mEa4umPXvhQ8j7g21v69ny6JHKTiFi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996566, "uuid": "2810ef39-cba6-4a17-b859-c571abd4c13f", "value": 120254, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996566, "uuid": "75bb5078-e286-46b3-831d-4a501292421a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d09665cb-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996566, "uuid": "573543d4-fd6c-43d0-8822-cbc1002aa06b", "comment": "Malware payload (Mirai)", "value": "c309ccf643bff6b028faa76d87696343", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996566, "uuid": "3855e1cc-0c14-44b0-a0f8-90917aaad652", "comment": "Malware payload (Mirai)", "value": "076038007f935ae4ac64566c2172f51b0d9e1a7916edd426aa7a51d3b8395c66", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996566, "uuid": "1c6ecd48-febc-4c84-805d-75fc2afb2925", "value": "T187D34B9B6B1C1767C1BB19F52DB737F087ADFA6101A22184A50EFFC41332A70661AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996566, "uuid": "804f0d85-dfc9-4bb8-bd37-d068fa6e17ef", "value": "3072:eHex3V+IDWnKhytm8dHr+yphcnvvWnDf4urTpzI:eHeRV+IDWKh07+yp+nvvWnDf4urTpzI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996566, "uuid": "47f51f93-c5f9-40c2-8afc-0a2a744d6f3e", "value": 142996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996566, "uuid": "216ca2f7-72f9-45b3-a1af-3032dc91c28b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d098ab01-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996566, "uuid": "78d39ef6-c530-43b7-a248-1fcccfbed170", "comment": "Malware payload (Mirai)", "value": "3d3831bd9ac46a08696f06a6b72ffbba", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996566, "uuid": "c7e91f5a-4fcc-4829-8f85-14c7e0851eee", "comment": "Malware payload (Mirai)", "value": "ca6baa0e87d420c9a879d26477be3fe2e9410f621193ca833eb46dbc38887092", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996566, "uuid": "f69147f5-bc26-463b-9146-acf9db554d84", "value": "T1C7E33945FC54973BC2E23BFBF79A43CE372A4B54979733215A296EB02BC17891E291", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996566, "uuid": "54c6a271-7683-4d23-af06-863dc4a67d1f", "value": "3072:hA9fqjnp9QNSgfJ7ORm/UHJ2SmbhMRJv9jAcweOoVWmbgpS7BqovnGr0fYpHJDRf:hAgJHJMbaHvNAxeo5ovnGr0fYZJDRyI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996566, "uuid": "277139bd-c4ab-45c7-a569-5be149303f24", "value": 156820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996566, "uuid": "f834aec5-cd98-4124-aa50-9350af599879", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d09a5f4e-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996566, "uuid": "554f470c-dddb-4b24-89e3-2cc250baf9db", "comment": "Malware payload (Mirai)", "value": "1eeeedcdf91210dd2ddd66fd4c173d7f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996566, "uuid": "2af3443e-afd3-4672-99f6-76bdd55cd339", "comment": "Malware payload (Mirai)", "value": "952501ad9734a08128e03ab6288bef88c27cf663dd566413276780a755b68f9c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996566, "uuid": "6290d4c8-d6ae-4e10-bfeb-194515506afa", "value": "T198E33B3B27231E33C5D1287102E30331B6BAD759387A57DBB9D46C6C2F1AA84351A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996566, "uuid": "1bf23c4b-c329-4fde-b9e5-fea3dc49a707", "value": "3072:OJ+ysmGd+bZOpI99V03lY9abkKYl1f1GvOWfDl49/1TZGI:OJUmfbZOC9kKaoKktGvOWfDl4J1TZGI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996566, "uuid": "4e95a0a4-a628-4125-9059-837e56907373", "value": 154502, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996566, "uuid": "a46b551d-ad64-45ae-ad27-2358924b780d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d09b3eb7-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996566, "uuid": "ec32c3d9-f41c-4995-ba45-a1f75203e21f", "comment": "Malware payload (Mirai)", "value": "215556ba52e0559b2bdfbe51c649cc14", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996566, "uuid": "40251804-e960-45a6-b2a4-6cccaed4e489", "comment": "Malware payload (Mirai)", "value": "39c7c22faed9335fbe468e840075f01d9200a59f7dc8a30c542aaf28d37c1998", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996566, "uuid": "1d700869-c6bb-462f-a0f1-8b2eb860f9b4", "value": "T170D33A47C8A28F77C0566EB629BB5534035AF9120B4F0BDA65386BF4174F9CEB10EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996566, "uuid": "c09a0184-42be-47fe-b311-555f2c80f954", "value": "3072:ASYJDHKkavu+F7wTZxYZpch/8cv/wOh5AJmWvg3nD2w+//Tp64:diDH8vu9CZg9wOzAhvg3nD2wo/Tp64", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996566, "uuid": "e405990f-ab1a-422b-9209-f91ef185f6f9", "value": 135098, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996566, "uuid": "55300fa5-fd90-41bb-8d36-18c17d3f1be2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0ac71a9-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996567, "uuid": "86f043c3-275d-4b73-b6e2-fea8f6a00d96", "comment": "Malware payload (Mirai)", "value": "c294a84476e153abe8c31d361c26b283", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996567, "uuid": "9cab83c1-2e99-4ad9-9ad8-86b4b0332114", "comment": "Malware payload (Mirai)", "value": "3efc9e18b2c309a22fb589ec40b2488d94c4fd4413e88ca8c888fe5b27dbde71", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996567, "uuid": "4dd96f71-6388-483c-b448-e306176d2229", "value": "T1B9D34A13F5D2CCFFC4A296F50BDBD265A963F4390B3A125733A47DA92F0E9881D292", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996567, "uuid": "a9e54a45-94da-421a-aed2-cd20343cec8e", "value": "3072:YsuSJBWCaETuzREnUJYCGaPc9XMhBBjGO2BDjjv1FjP3+9/NJMHI:FDDnVxhMhBBjGO2Njjv1FjP3+JNJMHI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996567, "uuid": "464bec24-0da8-45e6-a830-0b86b61ea49f", "value": 141844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996567, "uuid": "a5c74586-da03-41ce-8fb6-47ded90de291", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0c6e665-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996567, "uuid": "8d27c651-27ad-4f84-a76f-1754439556d0", "comment": "Malware payload (Mirai)", "value": "e46d2a29cd11b650959eed5de72acefa", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996567, "uuid": "15211472-2447-426a-b999-e560ee56f15a", "comment": "Malware payload (Mirai)", "value": "2b856202c504432e68cc1b6521e2e47469c769f5358aec1c6c5f5973d82f529d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996567, "uuid": "cdb42f0d-f3da-4701-8f7d-7458473fd54a", "value": "T121E33B83FD00DE76F41A967205D74B29B270AB624F531672631B3AAADE372C4381BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996567, "uuid": "26dcb08b-7d28-4f3f-9fa4-1512eb8cc84d", "value": "3072:Z6e+td1TzTNayBGPDrDMudiySVXqUeSsaZvKWnDf49/1TpPI:Z6e+tnzMyBEDrguDSJe4ZvKWnDf4J1TC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996567, "uuid": "8af1d694-60de-46af-829d-16afe76eff9c", "value": 147715, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996567, "uuid": "e6f9007b-18eb-40e1-90a3-ac2e1b526973", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0ec0ca2-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996567, "uuid": "05ca3fe0-238f-4879-a376-e8af8e452653", "comment": "Malware payload (Mirai)", "value": "bd1f698f237e50dbe5202f2d6fb6164f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996567, "uuid": "4b921233-f2a8-4918-ab5e-8d3cd1cc3b88", "comment": "Malware payload (Mirai)", "value": "096b41e15307d0e1928df8bfd9ad30fd3ed5692c9e797b48a3a6f5aff93cb1b9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996567, "uuid": "f4adb18d-7854-472a-8f0c-3789d430ad12", "value": "T122F33A05D9509737C1E32BFBF76A828E33271BA4978B33255A286FB41B8179D1E3E1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996567, "uuid": "1785471f-f956-449a-b031-26b6f43ba864", "value": "3072:SAWK1ji/bdZZA0SyL6hhhaB6fn18gxlxOEPPn2cESmfHKTWlhMrqVolsmyX98RmM:+6hPaQfnTlO82KmfHKAM+ommyX98RZo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996567, "uuid": "f3c9ce05-27d3-42ba-acb6-c7512bc58c01", "value": 167682, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996567, "uuid": "f9c86182-c258-429b-98a3-7ec9edd2a308", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1a54ce3-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996568, "uuid": "5f392b18-67bc-465c-be12-e47557cb3fef", "comment": "Malware payload (Mirai)", "value": "1cc65afce60bb19a4b7c1fddbb523e69", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996568, "uuid": "0a5e15d9-abb4-4d22-9bb6-30a432b6481b", "comment": "Malware payload (Mirai)", "value": "6ec73324715863c3c67b19a4cbe59a4f25d4cf72c5e5f8e672536d60272b90a2", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996568, "uuid": "e424224e-3b07-415b-b453-82715ebab39a", "value": "T10304B61ABB619EB7DC6FCD3302EA4602108CD54A06D96F6F72B4D618E78B94F09E3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996568, "uuid": "2349783b-4dc3-4528-801b-409774306262", "value": "3072:ZZN36smLBPSLROyf6SMJhPuvGFHgSLER9JteI:VRmLlyR1SSMJhPuvGFHgSLEXJteI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996568, "uuid": "9090e53e-56a4-4136-b540-2f9196202b58", "value": 188019, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996568, "uuid": "cece8f94-9852-47a7-bda7-908328a7b0cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1a7aa32-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996568, "uuid": "9ac22ac1-99a5-4edf-9b13-030d19d6a860", "comment": "Malware payload (Mirai)", "value": "2b30c565f96e961bbd568c133ecc8802", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996568, "uuid": "d8bef83a-faa0-4e36-ba35-221cfc18708d", "comment": "Malware payload (Mirai)", "value": "37a1c3ea708dc02a5f0df9923bfb4af5804199455fede66be624996ab38387dd", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996568, "uuid": "6591147d-fa6a-4038-9df0-b16a83abf103", "value": "T10304952A7E21BFBEE26886310BF35F70839921D326E18742E27CDA585F7128D185F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996568, "uuid": "0b4e256e-d608-4517-984e-cbb904ea595a", "value": "3072:O66YIU+BMOhAdMiwp7nWgePDQVGuvGFHgSLER9JteI:iLU+BMOeu5xVeBuvGFHgSLEXJteI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996568, "uuid": "2f6f9751-c1c4-4e1e-8fd8-e46e415bf3a2", "value": 188019, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996568, "uuid": "b5c935f8-f2cb-4334-8509-5ae3d4b281a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1d420e3-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996569, "uuid": "42a38b3d-aa3b-40e0-bb24-2a64d3bee3d3", "comment": "Malware payload (Mirai)", "value": "1d4b305759c9ff01b9b533e634820d6e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996569, "uuid": "cd1b819e-a30a-4b07-bfc1-a566a79f0a8c", "comment": "Malware payload (Mirai)", "value": "70ce48cb1caeae155abd3271e93723c97b2c7f8f8b52fea24cb72be3f1ed49f1", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996569, "uuid": "f558e123-8115-4fc6-9db3-7c687ae2bcf5", "value": "T16AC33BC7E642C7F3C4820EB317A7E62D4625F836891A8F9DF31C7CB49B169C9B2152", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996569, "uuid": "7a6b134f-6c90-4a29-bc15-bd0a8a25c7a4", "value": "3072:MBkENVx+92JRNaTeuEBFkPTRncysbm72v69ny6JP/KTiFi:MJvx+s9RbWTRncmav69ny6JHKTiFi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996569, "uuid": "5a15e61b-ce9f-445c-a934-79f45946cb06", "value": 122398, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996569, "uuid": "293f00ac-565b-41e1-9431-48e781a24cb6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1df4628-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996569, "uuid": "4e74a49d-96a3-42db-a3f8-e25b5df916f4", "comment": "Malware payload (Mirai)", "value": "57a57a59c8a35e626a6b0a6af5100854", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996569, "uuid": "f5f2a8c6-db8b-431d-8715-f192df03f5b4", "comment": "Malware payload (Mirai)", "value": "0b0cba0b3464428cd503fc53ef9478ba111f1cdd4e745bcf435935fa5d3efacc", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996569, "uuid": "4dbd2169-90a1-4b28-907d-dfd07f0f35cb", "value": "T157243B09DA509B67C1E33BFBF79B828A33234754A797331945286BF43BC2B9D4E261", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996569, "uuid": "56ee7d2b-bb90-4033-bedf-bb45ec063f29", "value": "6144:7JPgaSqUHSOfCN/MCcR3LF/bDt+M/9Smr2nBPNg2:NPgaSvSOfCN/5G3h/VP/kmr2nBPNg2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996569, "uuid": "db11e169-ac1e-4881-9334-e217db4a9c47", "value": 211132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996569, "uuid": "f875fdcc-2582-4cbc-ac8d-f35e3bc82cf5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "221b69c1-1c79-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744996703, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996703, "uuid": "4e596b81-0ccd-4f26-a52c-dbf8060590be", "comment": "Malware payload (Mirai)", "value": "9a37ec248c990731541c95f02cf25ec9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996703, "uuid": "df75d270-290e-4f08-ae3c-7e27f0303991", "comment": "Malware payload (Mirai)", "value": "55850272d292785ee1a5c06d151b5fd16346e450b229434966f57dd0694f3bd8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996703, "uuid": "a9ed74de-766f-49d5-8632-c6ab0cb000c6", "value": "T111137C79D41B5E58C09A0234A8A48E341F63F2C8D3625DFB37D146B29447E68F90AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996703, "uuid": "a527706b-5d45-43c6-a0be-6a7955b671f8", "value": "768:NUalLr6vIRp3pcjtPfibuQ2Bgf1DQ/+OZARCegoqTLV32w:NUat2vG+N0f1DcARFPqV3v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996703, "uuid": "a936be32-4283-47fe-8b05-ae6435cbd422", "value": 42236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996703, "uuid": "708bff5a-2779-4f14-b7a3-6d4fd73f15f9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "575ac529-1c79-11f0-82df-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1744996793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996793, "uuid": "5e5f8f21-b98f-45a4-93b4-ae3d297334ca", "comment": "Malware payload (QuasarRAT)", "value": "233a781d28bd3b3a86178c48af135297", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996793, "uuid": "2d10454a-0c54-443a-a83b-fcb1bbc1a821", "comment": "Malware payload (QuasarRAT)", "value": "8c4edf15b2e0bfaaf67d12a3e17e0d6d314ea1df16965c8c1d7d2b83f3bc1c36", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996793, "uuid": "818f3fb8-1b10-446e-bef9-5d70b576022b", "value": "T1E4E55A1477F85E62E16AD3B3D5F0542363F0F82EF3A3EB0B5191667A1C93B4098426", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996793, "uuid": "7ab55a46-0d4c-47e8-9a02-0a9a942d4ec3", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996793, "uuid": "90e8857a-8fb5-474f-85f6-dd3caba3b837", "value": "49152:DvbI22SsaNYfdPBldt698dBcjH0VG3admz++oGdTjmZTHHB72eh2NT:Dvk22SsaNYfdPBldt6+dBcjH0G3ayj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996793, "uuid": "d9c7b251-295c-4383-aaee-6ac8e497f6df", "value": 3266048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996793, "uuid": "7d54c8d4-02a4-426f-a05c-439add09039d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e93b5c6-19f1-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1744996984, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996984, "uuid": "9b1c069d-e320-4116-ad6c-42d45b7ad9c8", "comment": "Malware payload (Gafgyt)", "value": "8859dc6b01f4421ad069d07e7d38291b", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996984, "uuid": "93536f16-e903-4314-9b7b-e28896193a87", "comment": "Malware payload (Gafgyt)", "value": "c20a3af541fae553c448581c67d1f7428379080606255b142f55d7f558786c6c", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996984, "uuid": "888fdef7-ac86-4995-b108-dd31e891a074", "value": "T19C31E9CB31A14AB8EC75F92B7169C844BAD5E5C71DCAAF85ADDC3CD9088DE0834036", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996984, "uuid": "71b010f9-e3bc-4d68-bfec-3c92857071ec", "value": "24:1/Q6/l/6c4E/rnJ/B/t/B/te6/9T/V/Z3/l/lr/twbCoR:1htn4ETnJpVJA6t9h3t9rubCoR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744996984, "uuid": "43b53d18-de1a-45a2-8881-0e78ae7c6d86", "value": 1863, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996984, "uuid": "9354d63d-74b3-4690-9d88-ec611de1ca19", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05c6021c-1c7c-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744997944, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744997944, "uuid": "58047790-787b-47a4-bcbc-57ca73146cab", "comment": "Malware payload", "value": "b576d1b927f27529e49a254a30d7f2d3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "vshell", "colour": "#d2c6e9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744997944, "uuid": "360685b2-2bb0-46da-aa74-dd10a80344ca", "comment": "Malware payload", "value": "352769c7f3dece7c5a09843789a96a7a567900f0873ecbd42ac61555be5f687a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "vshell", "colour": "#d2c6e9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744997944, "uuid": "db148a5b-25df-4f6e-b25f-0a0102b3185b", "value": "T1DF123F47A2D0CE3FC8D953384867122472B794BEDF629713064855B63F427E81E6EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744997944, "uuid": "d6250d8e-4004-465e-8218-59910a667fef", "value": "96:GqTVJWWGXzS6gH5ML09V1J9G8Ym/+hrsrwegVekrf7mxaamBFBp8sBRnsH5vZAC:GqnWWHHZMWT1YmWhrsnurfjTr8sbnsl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744997944, "uuid": "ccc1f615-c62a-4fee-96f1-14f4ee71ce65", "value": 9800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744997944, "uuid": "a82473e3-6a56-43ca-828c-822d57c49b69", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "772ac349-1932-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1744998364, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744998364, "uuid": "434c06df-cd7e-442b-8e2e-11ebe92b3d39", "comment": "Malware payload (CredentialFlusher)", "value": "3ec886e81b3a5649ff9dac6d88baba96", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744998364, "uuid": "028a04d3-6202-40a0-afc1-00218c03cd70", "comment": "Malware payload (CredentialFlusher)", "value": "ecc4cde448fa9b09bffc77555b878e1656ac4e5c6c4218b08078ee85b1b8f8d5", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744998364, "uuid": "4dd965b9-fba1-4524-b53a-bb9ae69db552", "value": "T115945C217813D032D66291721F79FFF585ADA8259B7109DB7BC00F769A202E27A31F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1744998364, "uuid": "bd3ccd07-4d57-4c78-94d9-20d260c53452", "value": "1e7280afbf80c2800b272220ce0718da", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744998364, "uuid": "bf8e0eb0-2c5f-4b58-82dd-9682ffa81313", "value": "6144:tiUuGdolfFd313lcnGpPpnbJoHtbspmZfkCw3uWgGUS/T+WiU+9GTA/nw4AO2i2J:tiUuGdolfFd1lGkpbCVkCweWgB7A99j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744998364, "uuid": "855be07a-9279-424f-ad5c-11bd38242331", "value": 425472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744998364, "uuid": "69c90fcc-eef2-4659-9256-3ee23713d1d7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d18594b2-1c7e-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744999145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999145, "uuid": "57cf511c-0ffc-41d8-b557-cf1a2f72da29", "comment": "Malware payload", "value": "2634c9a952f530eda99ca6254afb1197", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999145, "uuid": "29d3b2a6-e301-45ec-b100-ae506dbebdb7", "comment": "Malware payload", "value": "02ebe09b822cc91399114c4af4dd2ada51706d81bf280a296bed9734fd5b2c7e", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999145, "uuid": "0a05e0f6-d51d-41f8-b931-792f9d0bff67", "value": "T15E016B12A2E7FF7179DB28309D3F6B092AACA016564176081BE61462E4D0C4EE33ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999145, "uuid": "919e2ab9-251d-4acd-a11e-95045b2db896", "value": "24:ciastRNKiGErX9BS2rJ3CavwGasYMxLhEtXhzA:cirtLGkX9o6XBrEtxk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999145, "uuid": "efab631f-6252-4e3a-be79-c6a6a17ed9fd", "value": 813, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999145, "uuid": "c6fa740a-eba3-49b5-b86d-d98d2c9f22d1", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d18a4347-1c7e-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744999145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999145, "uuid": "cf918095-d1b2-427f-ba0c-f51917017d49", "comment": "Malware payload", "value": "3464b2685a4080c1eae58e4a7f71316b", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999145, "uuid": "bab9326b-29ac-4c67-b2bf-acfdcc964f45", "comment": "Malware payload", "value": "4b04e7b67b47836f9848db9b0bc3167bbeaf71360add3702a05d06f499ae17a5", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999145, "uuid": "d16ae533-d0dc-486b-99ef-f5d3c2aa50fb", "value": "T1BB61A60B3991EFF178C55821A5FEA704D5CA80830532FA1833EB8537FAC5C89B229E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999145, "uuid": "9d9e418c-a47c-40be-85cf-a38c57deba1d", "value": "96:c6t+YP/xU3FNISWS6C0wGm1IC0W/j7kiqV7WE:3t+YGFePSGc/j3qVCE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999145, "uuid": "f83c26fc-bfc3-44e7-b030-caeb81a30d71", "value": 3325, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999145, "uuid": "e65e0ad9-2430-44d4-97d7-f54f0995adf1", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d194264f-1c7e-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744999145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999145, "uuid": "183c8383-5f51-4d31-9308-304b34af448a", "comment": "Malware payload", "value": "ed3f8516605d228361e656e0bc41ab22", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999145, "uuid": "02c06432-8372-48f5-8029-e5d8953c330a", "comment": "Malware payload", "value": "23a1fb190d2ad66df4f0444c6c0d8efc7f4d2c805573e5d2ffe15214029a40a6", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999145, "uuid": "75d5378f-788a-4373-bbc9-f3686da5ea4e", "value": "T1CE21F1A2F441DFF831CC8267B2ED8268D9C3D4CFC6298AAC55233931740EC85B2369", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999145, "uuid": "88ed08b5-19d1-42dc-9546-57a23eb3e582", "value": "12:okoy2Gol422kt5MBMvM3rfax7bUXEpFAKOVWndxoqMbUXEpFAKOVWniVoqMbUXEz:o5B5YMvM3WAyeond5AAyeonWAAAEnu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999145, "uuid": "331a5e17-1536-4773-a2e4-0459b1e72bba", "value": 1182, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999145, "uuid": "12f1b597-21d8-4d9f-b0fb-fd3b561402b7", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d19ae121-1c7e-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744999145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999145, "uuid": "f6551965-c6f8-47ab-99c1-4070800018c8", "comment": "Malware payload", "value": "38e8c0bc895be9401e1cc7c5d3bf937d", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999145, "uuid": "d0ddc0f6-77f9-44a1-ae35-e7758bb17280", "comment": "Malware payload", "value": "bf57a06b39f4612aa166fb8084a1d0b97129b83c1cf0d5889030bce7fd3535d8", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999145, "uuid": "738a81a2-f95b-4981-b242-12aaae8a9262", "value": "T12A61970A3155EFF178C95921A8ADA754E6CE80830552BA1C33DB153AFAC5C8EF239F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999145, "uuid": "08a46404-e5ad-439c-9a50-77af8a613b44", "value": "96:c6tiV/xU3FNTHeoXl6C0wGm1IC0W/j7kiqV7Wy:3tiUFpBXXGc/j3qVCy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999145, "uuid": "f6e7c06c-7453-486f-9a29-4483cfad0740", "value": 3292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999145, "uuid": "6689b41d-9994-4597-9deb-741ed1a70ea7", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1fe74de-1c7e-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744999146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999146, "uuid": "69da3cc5-b0f8-4091-aa18-3ac55e5b94e4", "comment": "Malware payload (Mirai)", "value": "0ba908efef1395288c270c24cdefc31b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "socat", "colour": "#082102", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999146, "uuid": "52de6c12-16c6-477f-99cd-8c9a77e47836", "comment": "Malware payload (Mirai)", "value": "71c81cb46dd1903f12f3aef844b0fc559f31e2f613a8ae91ffb5630bc7011ef5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "socat", "colour": "#082102", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999146, "uuid": "b24d503a-f0c0-4f51-8ab6-9a1fa12cf283", "value": "T1F284FA3753A2667DD047D2B81BDF42A3F670B0B80235710FA3955E3A2B36DE11B49B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999146, "uuid": "1b7bb151-f4ab-434c-a501-aec2d11bb2d6", "value": "6144:8e/SGwaCg1+HpBxrkSNYgzM4jGGa1zpj6kJ:8kINHpnrkSNYgzDjGGa1zpT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999146, "uuid": "7ed66cde-c328-4663-9a87-8c18d65f2602", "value": 375176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999146, "uuid": "6a6205a1-6586-4da3-97ca-c048ec4ce814", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3f3ce5b-1c7e-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744999149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999149, "uuid": "dceda319-477f-475f-91ec-ddc206c9d0fd", "comment": "Malware payload", "value": "a84695e461502f4764b6b4215a5daa54", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999149, "uuid": "b476398c-90c7-429e-abea-154d644ec9f1", "comment": "Malware payload", "value": "a53d0d8ca3a89a4e43ea2993031c375499cc01810dc18c65097993c43cc03ea9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999149, "uuid": "eb08a20f-dd3d-4519-a257-85960ff4d7c3", "value": "T1530633AD82245B5730BDE69237752C5EC2843035F29658ABBFA6C34358FB7F968C40", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999149, "uuid": "444b4ba4-870a-46f6-a16c-df24a4827314", "value": "98304:gVWb4KHLqgozwTfBytdxpg/tpe96fgOiE:t9+goMyDxpgFpy65", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999149, "uuid": "d37522e4-190d-4af2-b9ab-29d888d63bad", "value": 3952976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999149, "uuid": "b6939086-fe3e-43ca-b353-f22c51946093", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d42a29fc-1c7e-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744999149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999149, "uuid": "9adfacea-8e9a-4d2a-a0a0-0496144d0af8", "comment": "Malware payload", "value": "806b91c933e2202d5b6d836af9162e28", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999149, "uuid": "d5f00bd7-8d24-4b65-a33a-38a76e294a79", "comment": "Malware payload", "value": "d6b14a4fbe5b9adbc0094098b4690ba5f5426247e21474915c408ca4553fcd49", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999149, "uuid": "3a09c690-ad78-4fa0-93aa-9403426cfd30", "value": "T1B51633BD06A3B15573623E84677CF8C969D1353349B638760D0ACCEA4C39AE6F6C29", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999149, "uuid": "72674127-6606-4197-9ae3-417eaa1f8b25", "value": "98304:YpCv6X2Wp6/HZ28dxpAG0zMzsnOGRYErKdNhlwJI2l4Ts6n6QZtLK1j5MR:byGWQPdrAryH6WC8Lqy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999149, "uuid": "4415c171-5a56-433c-88a4-de38dbc71002", "value": 4272832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999149, "uuid": "04855705-d98d-41e0-80da-700ee7dbcc7c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5720b41-1c7e-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744999205, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999205, "uuid": "025bda69-d8d5-4974-b327-ab54882d4d01", "comment": "Malware payload (Mirai)", "value": "84835a40a088a2ecc90fb621c7110a54", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999205, "uuid": "66459e5e-8e97-4575-81d6-b6da63b760c6", "comment": "Malware payload (Mirai)", "value": "ac20aacfec66e8d9cd22077186d8198ef64998cadcd75cf4253b043637bef393", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999205, "uuid": "559d3601-3c39-4986-9f6a-c2921c9c5f39", "value": "T15AF0A7A006501BD423C4D224F5F5F8A5768705C243A39C3AD87133793588D0FE4A5F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999205, "uuid": "c38ce561-4fe5-4c24-9949-8ee7c3aea9a5", "value": "6:T68DqOeVSbe4Q4cdaAdeJcdUuFpeJcbj17vi5gZOex8oPXdvi5gZOex8obP:e8GpVSyyTJUIJ7Q7xz6Q7x3P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999205, "uuid": "e9f6e4f3-3c40-4f7e-bd29-c39483ab8b8e", "value": 440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999205, "uuid": "96a6898e-39fa-4fdd-9125-9f538288dc9f", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f573f13d-1c7e-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744999205, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999205, "uuid": "24497916-f326-4915-8f45-4e4cc6ab8740", "comment": "Malware payload", "value": "62c38c2ccbf469e828522e0bc6dc8c82", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999205, "uuid": "45390a14-6469-4646-b23f-879b484dbc30", "comment": "Malware payload", "value": "d5571385c914b99e993585a01eab4abcd799f5434766bad99491ba30280ca706", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999205, "uuid": "99ce97dd-4e72-403e-85a0-e387ffb650c4", "value": "T114E068F7B020BA70294D8AEA369EC094F801BD57FA954C3C722E1CB15D5C14AB2B56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999205, "uuid": "5efa959e-364b-43ca-b080-c6b0c7783b9e", "value": "6:oCpikFO8A/b221xo2c2c487/iMcRKQuK2qcmb2URDFJL36Vny55kJhP:okoy21xoBeRZuK24b2W36FEehP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999205, "uuid": "d8f2ccb8-14dc-45e5-92c0-4b149badafee", "value": 395, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999205, "uuid": "bfb208bb-4c76-49f6-8fed-818effc94539", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c92ff21-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744999325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999325, "uuid": "bd5c364d-7ae4-4d56-8136-ddcdc6d08945", "comment": "Malware payload", "value": "314e35abc6a00c7d3b45bb429802ed9c", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999325, "uuid": "f538b5bf-6b07-49c8-bb3a-7a7b749c3140", "comment": "Malware payload", "value": "ee60d3c0a719c232dd257d2d10bdf6bfe5d00a1afa02adac9f46d9a4a3c691b0", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999325, "uuid": "df82f7e4-fb39-4370-beca-0398dd4295db", "value": "T1A651644BBC00CBB13CCE860ABB5CC455E987659B8714987C3CAEA8566F0D294A1F5B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999325, "uuid": "6bd5522e-b156-4afe-b7cc-85cf0889c76b", "value": "48:jjw7n/spHYMvM3hcHUHq7WXJmw7n/spHYMvM3hcMStDqSH72EDPE:YT/uHxU30UK72DT/uHxU3LUtHCC8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999325, "uuid": "38d912e5-2d31-47e5-a908-2fd3251f92a2", "value": 2630, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999325, "uuid": "55179468-a498-4547-9845-9e39c94845ee", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "601a74d4-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744999384, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999384, "uuid": "b1e044ff-488c-4075-b017-e17122a862f9", "comment": "Malware payload", "value": "40d827f6c318aac2c7c1a2a9f9bc028c", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999384, "uuid": "60a6e033-fe73-44f8-9b68-b5de5a29b7d3", "comment": "Malware payload", "value": "874d82f09a96415c208250c8e6dcbc71d8f3c378636eb5d8ba4661facc80fde6", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999384, "uuid": "b6052d80-9967-4d3e-9838-e500bca44377", "value": "T1E551751171D2FFF9B8C9C431BDBF8724D686C04B0521B52817E25077F8A1D89E329D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999384, "uuid": "c733724b-fb06-43fb-a318-fd99dc2360e6", "value": "48:hb1ESsgtCD6eKj2JETrtLGDsYMvM3bvFNCGF6GGuGM0TTS1c5LRwNk:lBtC8l3tlxU35KSGv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999384, "uuid": "4b882a1a-b39e-4dde-8a91-d82cae26cf8d", "value": 2651, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999384, "uuid": "1f33fa70-3eff-45bc-8a11-424672e4a289", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7655820c-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744999422, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999422, "uuid": "4915bada-54a4-4626-8683-e81a8cd45d2e", "comment": "Malware payload", "value": "2c8bd43b12c172420911357e9b9d2786", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999422, "uuid": "9c28619d-e473-48a9-886a-646f5be7b755", "comment": "Malware payload", "value": "24c2dc3a913860cf6ac783f7f42cf177b7f2e4080dc026f9d5469f5ca6504277", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999422, "uuid": "7d5d7043-023c-49dc-b0cf-b9c317a11331", "value": "T1E134CF9097CD9EC70FE154D8806EDAB8B2A3F9969F15CC61D14318FCE11A85337268", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999422, "uuid": "6547b263-d730-4cd4-8ab3-c54bdf0d2619", "value": "6144:uqBpro8JW12GKmjchmmHTSGR42O1AoCOU3xfYU:JDPJWQGKmjchmzQg7M3xh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999422, "uuid": "173a6912-13a3-4377-963b-4a1333bffbce", "value": 239698, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999422, "uuid": "aac1e0c6-4dee-4d66-9053-65f246933231", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "849a1dda-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload (ProcessHider)", "timestamp": 1744999445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999445, "uuid": "6ee5c2e1-a64c-4d04-95a9-8ea8fa245e05", "comment": "Malware payload (ProcessHider)", "value": "ceabd6f2672182b22b11592a65f44d4a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ProcHider", "colour": "#F8DF17", "exportable": true, "hide_tag": false }, { "name": "rootkit", "colour": "#656659", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999445, "uuid": "10c3fc8f-d9b7-4ef2-bdbd-72f70fb06777", "comment": "Malware payload (ProcessHider)", "value": "dcd7aa6dfb183e42cd9f900c4fbd72f18b0ab7234e178631094086059d29cc9d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ProcHider", "colour": "#F8DF17", "exportable": true, "hide_tag": false }, { "name": "rootkit", "colour": "#656659", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999445, "uuid": "38cfadab-59f8-418a-a87d-5d58f27c5e84", "value": "T10852631BF7D6997EC098733406974334E3F0E8F09B229717630896B96D523D80F6A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999445, "uuid": "2ad250c3-a8b9-4c05-9a3d-45f3ddcb9f37", "value": "192:R+8pIEbNkv4HP63sGtwcNr4nk4+Su1WSi:BbNkv4HP2wqr4H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999445, "uuid": "5940d9db-841a-4c90-9d27-fbc8bcaaa8cb", "value": 14360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999445, "uuid": "8b5c00e4-5767-43a3-ab20-883e90617c74", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "849c8bef-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744999445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999445, "uuid": "c6428894-0a18-4051-8ae0-0e1614961dbc", "comment": "Malware payload", "value": "2c7f94f25da0dd1f5f20cb877c2aaeb0", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999445, "uuid": "264dd54d-6f0c-4dd8-9e9d-5241ff6882b2", "comment": "Malware payload", "value": "727b5969438f746413c9637935fcaf4126aee4ab0d6c480dc4013ba8c7c9800a", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999445, "uuid": "354f9235-1d5b-445d-91af-6a9e572be630", "value": "T10B41DE677859EFF9D5DA981A799FDB11E2C7C0C70A10F92C15E08223F4986C6F069B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999445, "uuid": "a1afc752-ae60-427c-b1a0-31ed1dc9ca38", "value": "48:jrtEcJ/YMvM3boFNI61B15K6nWnynwsnAwR+:ntF/xU3gu1R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999445, "uuid": "71b7cbe6-7bff-46ce-b3df-78ffd99da041", "value": 2101, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999445, "uuid": "5e0853d5-ad78-4f30-8fcb-80c57ac6f0e9", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84b9035b-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1744999446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999446, "uuid": "45236e7e-6d1b-49bb-a7a4-b398a3eb8378", "comment": "Malware payload (CoinMiner)", "value": "1d5570f1cb90bd06f6b6c76129869a0e", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999446, "uuid": "047b3b81-89d9-4078-9dd8-e0c5c1a3c81c", "comment": "Malware payload (CoinMiner)", "value": "834d27e19d619c76bbc58721729ea50fea5afbe01f0c24e06c86ffbd5a832cfd", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999446, "uuid": "8539ceae-03d4-41bd-a814-53cb022d1f85", "value": "T14241E067B859DFF9C5DE981A695FDA00D2C7D4C30A11F92C25F58227F6986C2F038B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999446, "uuid": "00098ee0-a8af-418d-856f-11432883a667", "value": "48:jrtxBmI/YMvM3booNI61B15K6nWnynwsnAwR+:ntHmI/xU3/u1R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999446, "uuid": "30724c9c-3f69-4be9-adff-a04829bc059f", "value": 2271, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999446, "uuid": "99b4ffc4-6b21-42db-8d2f-6ef8545614ec", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84b9e25c-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744999446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999446, "uuid": "fcc51bd2-28b2-460d-8025-28a14fe6ca73", "comment": "Malware payload (Mirai)", "value": "42cd4166421870164ba885a0a4f4bc71", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999446, "uuid": "cf2e9962-9aee-4a83-8d9c-ec461cd2c04d", "comment": "Malware payload (Mirai)", "value": "ae98c57496deaecf17b7e2a44f07b41b295a3d5e673ffadd46eda5674d40f735", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999446, "uuid": "1d0eba26-1dba-411d-abda-f0af5e369477", "value": "T1868165473968DFF026D65829E6ED6A05E6C750C30661B82C30BE9737FFC8986B124F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999446, "uuid": "19f1439d-dd9b-4982-8195-902224f8570d", "value": "48:Q8Hq7WXJHFhBty61q15MqB6nWnynw0nrJC96C0wGm1IC0W91jdpqjitsLZpRpg0c:o72btGB6C0wGm1IC0W/j7kiqV7W9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999446, "uuid": "6d04bad1-76d3-4cdb-b4ec-4fa302218963", "value": 3878, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999446, "uuid": "d7a5559f-ee50-4638-8d48-d72f87e7fd76", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84bdb2a1-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744999446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999446, "uuid": "9e0e1d19-d713-4929-87dc-f68446638914", "comment": "Malware payload (Mirai)", "value": "fb8a1782677a089e0ddc9f47de91ad57", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999446, "uuid": "e99c2ac6-422f-47e3-a175-edbbdd7fc4ec", "comment": "Malware payload (Mirai)", "value": "cc6e552b50d060d557a6aa7cd2fe37d3012d8076406eeb2e9bb77be0f5bb8e01", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999446, "uuid": "aa3992ba-0fed-4492-ba91-3a10e40bf10a", "value": "T1A5D0CD90116173A403CDC534D9F450D87373459342535D39547F377434C8D8AB558F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999446, "uuid": "123cbe63-2242-43cf-a4c1-e3893204b585", "value": "6:ired4cd4xSXdvi5gZOex8oQhrFGYmpyJRL:iCSlxS6Q7xkhrFNmpyfL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999446, "uuid": "1af15eee-6802-4075-a431-1a83c2a07785", "value": 288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999446, "uuid": "1e96e046-e7bd-4781-867a-8d984d1bfd79", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84c1ed2f-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1744999446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999446, "uuid": "5323602b-1354-4cda-8896-2c3f2a373243", "comment": "Malware payload (Mirai)", "value": "711d2378f4fb2f6ea056332610ca70d6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999446, "uuid": "f3f806f8-82e8-47b1-b1e0-246cc678cb65", "comment": "Malware payload (Mirai)", "value": "e5680420c24475ccc1cfe3ecd14021f24f96e9d31e499b3d5a98a26429a60e18", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999446, "uuid": "cb8ff925-99f2-4924-91e4-d6357b36c865", "value": "T11D31534E3668EE301A551E7581FC2148B6D6508200A33919325F597DEFCE4993618A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999446, "uuid": "943d0e75-36ff-4285-a8ca-e22753b75c9c", "value": "24:eKjY2SOE2WnC0weZhUSO3XinC0MWlIaY0Q1jdpSOEjjXx3LfF/atuLfFvoLfFVHH:R96C0wGm1IC0W91jdpqjitsLZpRpg0mb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999446, "uuid": "bf1f0e54-b01b-4b40-94f8-57cab21281b4", "value": 1497, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999446, "uuid": "91e91b19-0ae5-4bcf-8114-d5bda938e094", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84c674e2-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1744999446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999446, "uuid": "fb0c9094-c67a-4787-b3c3-cf20104be827", "comment": "Malware payload (CoinMiner)", "value": "ec5b744403b84622729ed32fa205d075", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999446, "uuid": "f09fb076-263d-4e3c-b8b1-0cd64216b6f4", "comment": "Malware payload (CoinMiner)", "value": "c31e4e1012001ae18da4566e78dbf7eca6760e0971f7a81b955216a7b2e59d75", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999446, "uuid": "14b65f9f-4144-45e4-9ddc-9dbc9c186739", "value": "T12941DE677859DFF8D9CA981A799FDB10D2C7C4C70A11F92C14E08623F4946C6F029F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999446, "uuid": "b635cbb0-67ee-45d7-be64-85cc83627f22", "value": "48:jrtc9yQ/YMvM3boeNI61B15K6nWnynwsnAwR+:ntcUQ/xU3ru1R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999446, "uuid": "2da0724b-d8f6-45fe-aa08-32d01882d617", "value": 2083, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999446, "uuid": "4fdcfbb3-2eab-41e9-9c5e-f9a172f6f0c6", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8535ff9d-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1744999446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999446, "uuid": "39b82c2f-1665-44b5-91a7-28c7e88e9175", "comment": "Malware payload (CoinMiner)", "value": "b1c51ab3c494a94faf91e506c5a48029", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999446, "uuid": "58ae21a3-d8d3-4eb7-b63e-aef895c7351b", "comment": "Malware payload (CoinMiner)", "value": "49c9ec53e3ad95f61af108166060c8b489300efa601d646166b3a79b96c215a3", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999446, "uuid": "1f61134a-466e-4e1b-b423-caa571afea11", "value": "T119410057B855DFF8DACA981A799FDB10D2C7C1C71A11F52C14E08223F4946C6F028F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999446, "uuid": "46307a8e-bb49-42bd-b7e3-273404e9fe4d", "value": "48:jrtc9bc/YMvM3boeNI61B15K6nWnynwsnAwR+:ntcC/xU3ru1R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999446, "uuid": "e9d77872-8668-4105-be64-c716f6bb48e9", "value": 2082, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999446, "uuid": "0e48f578-9081-43b2-8a92-599b602552c9", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85530ea7-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744999447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999447, "uuid": "39cb0f3e-d3a0-4a3a-a0d9-f5f3c11a2136", "comment": "Malware payload", "value": "e8a2da8d8ae56a074cf6e64be443f795", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999447, "uuid": "3ab9eaaa-93ad-4040-a479-8a8206156155", "comment": "Malware payload", "value": "61226c5303bf996d758c8838f205cd890fe274619dafe61841e45b3958e9a88f", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999447, "uuid": "7b037547-e60f-4b08-986d-2b2f81005897", "value": "T12641F1677859DFF9D9DE981A695FDB10E2C7C1C70A11F92C14F18227F4945C2B028B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999447, "uuid": "f31f2c24-ad3a-41e5-b983-36fa2ff1c097", "value": "48:jrtrrggH/YMvM3boFNI61B15K6nWnynwsnAwR+:nt//xU3gu1R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999447, "uuid": "0d79fd4a-4200-4293-b2e6-cb48540680df", "value": 2196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999447, "uuid": "475d7424-3d37-4fc2-8932-964c196322aa", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86c371b8-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744999449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999449, "uuid": "9870e983-3c2d-41e4-9723-d0a4e3021a3d", "comment": "Malware payload", "value": "14e7fb298049a57222254ef0f47464a7", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999449, "uuid": "5605b9ef-ebf4-4273-9b02-86c8ed36f5d8", "comment": "Malware payload", "value": "e4aa649015b19a3c3350b0d897e23377d0487f9ea265fe94e7161fed09f283cf", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999449, "uuid": "eb41e38b-4df2-489e-93f6-cf832936c73d", "value": "T1AA2633C6005466903653EB3192A7F9C03B1ABA6B4E6CF0514E1BC9DE0438DF6DBD6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999449, "uuid": "5fe70dd3-a2d2-482b-bfd0-7731ceb64a87", "value": "98304:m68fgJsvjKnz0KV3kgFq+CZShee/ZcITk9GP4CfQXBTjlHo+JmsN0Xk0H540z1PO:ySu40Kw+ht/Zcr9dCf0lHtkXkT0z1PjK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999449, "uuid": "32a592d9-4277-444d-9da7-44f5997e7fa6", "value": 4653832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999449, "uuid": "2ee066be-98de-494b-b603-bf5bb475301f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95bc61ba-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1744999474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999474, "uuid": "7bb20288-bd52-4067-ba14-45633e625703", "comment": "Malware payload (CoinMiner)", "value": "7849983d77b052de90558feeefb3078d", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999474, "uuid": "c2eb4581-94a7-464c-973d-c2a58767607c", "comment": "Malware payload (CoinMiner)", "value": "decd1f03573fe4b7171af8edd3c342799be4e6b4431ed8c2a6ed9c3728af5bad", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999474, "uuid": "dc2c0bec-bef5-4723-bbed-d024d77e581c", "value": "T1F6A70246B7A254ADC096C930836B95A1B930786C032179FF65D5EA302F67EF05F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999474, "uuid": "6f74af6b-68ff-4d48-823b-44ac4d0f457f", "value": "786432:GguQs0Lz/fiQBrfR+vLGRfU0qCmydhdD82l5cF+DROb6rj8MXSzls0eO0Uep7GSs:SQs0Lz/f1pgU8ImydNncwDRx8+SJs0eC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999474, "uuid": "3daf332e-6aec-44da-9022-81f9b3afc0b8", "value": 46490226, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999474, "uuid": "b25dbf45-8bf9-4c08-8b0f-0ee31bf8f40d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99282ef4-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1744999480, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999480, "uuid": "bf1e01c2-3e38-46a8-bc18-4574fada454a", "comment": "Malware payload", "value": "248c4ba7520d7f0b72f9e7951eeaa1e4", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999480, "uuid": "2c57b9cc-598d-4721-81c7-3fbed92727d8", "comment": "Malware payload", "value": "b68c4b6587a17eb6fb78d2f82b1c1eb7ade14bd50a1a49021b763da4f473a619", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999480, "uuid": "a5fc4bf4-e16d-4a8a-8ab4-8a56267db74f", "value": "T1D2182316F5B2909CC4A6C978865FE5337E31F85C82306EBB5594AA311F72E308F2DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999480, "uuid": "efc783d1-50a0-4d0d-9f0e-bc493ba7547a", "value": "1572864:W2OKRR5+vqt3y6q5LU3wmTYu3pB/e/SpdAP54xNYzdF5SghrbD+uz9ul2zmM0N2g:NvRR5+St3GL0/TYEnG/SpdAP5AazdLX6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1744999480, "uuid": "181e14c7-627e-47e1-8f8f-96767b95a633", "value": 84913000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999480, "uuid": "b7fecf7f-b2d7-401a-832e-29895964de9d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d176bd5c-1c83-11f0-82df-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1745001292, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745001292, "uuid": "69e6a7dd-c085-4201-95a7-1e90cfa277c7", "comment": "Malware payload (Stealc)", "value": "d482d7bc73f4825e5e14c70b39811a20", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745001292, "uuid": "afe3e134-ade2-4550-b659-b0184ff8281f", "comment": "Malware payload (Stealc)", "value": "4a9c85d70878ac95515200b4864e1671cb4c4dbeba76b914f79ae9e1094ac53a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745001292, "uuid": "9066b6f6-3559-41a7-a874-1e8c03e8d6c9", "value": "T162B5338ED2DB5C37D71F1171E685D8253FA61624472243BA438A0C92FB4BB6F93B64", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745001292, "uuid": "046d7f6f-c6c7-4978-b398-d16317926e1e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745001292, "uuid": "ffe3af9f-0120-411c-a93e-085435b01776", "value": "49152:lDN1CgL+XjcZ7VGTtcpKrjgMjE1MD+2kKrUywUt2KBQFvwCTwYC7SCB60vNJ:l7LLZ78tP/gogMD+FKrUywUoKBQhw5Yy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745001292, "uuid": "513089dd-538b-4804-a66b-4ec54ff783ad", "value": 2492928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745001292, "uuid": "cfe1adc5-5a93-488e-9703-dcf04f6a21a1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fbedf00-1c85-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1745001880, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745001880, "uuid": "ae8d784b-d956-4c7e-914b-a19630d22c78", "comment": "Malware payload (CredentialFlusher)", "value": "0561f0bacb46cb2c12050a5eeb4ad22e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745001880, "uuid": "30997da2-9d52-403c-bf2c-1b43e128bb06", "comment": "Malware payload (CredentialFlusher)", "value": "64c0a302390e6cc57c553d3d2871d72a41ca84ea6950d4eab49bb105a5ebf53a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745001880, "uuid": "79e6bf58-760b-4f78-8107-38b8453970ff", "value": "T14F25AE0273D1C062FF9BA2334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745001880, "uuid": "54d9d7bc-18d1-4b28-a4c7-d41c5241c83d", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745001880, "uuid": "6a668894-055e-40b9-a60a-2ee9660054ad", "value": "24576:dqDEvCTbMWu7rQYlBQcBiT6rprG8a0AQ:dTvC/MTQYxsWR7a0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745001880, "uuid": "6d1cb33d-5f1b-46c0-af59-7fc092e32999", "value": 970752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745001880, "uuid": "04f89515-1738-45bb-a5fe-0be4465fa770", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b2bc0b3-1c85-11f0-82df-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1745001926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745001926, "uuid": "f592257c-6134-4429-89b3-845982e0c5af", "comment": "Malware payload (LummaStealer)", "value": "2c13b01ae0c5fb1f94470af5b5e1685e", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745001926, "uuid": "14238f0b-9228-4bf3-95fb-e06401d65532", "comment": "Malware payload (LummaStealer)", "value": "60bdc4c80ad266ef7195a95323b6f1d130af0a2be19e7880d816285b308f2b26", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745001926, "uuid": "b7b70d06-8b83-4a1d-a7d6-cbc886e7ae3c", "value": "T1829533907743E923EBE6867623635210AF39EB65C0E0D6FF2C44D0B7A913E8A572C4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745001926, "uuid": "4157aac2-8eb1-422d-96eb-c42a84e5e20e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745001926, "uuid": "beb2c041-c4bb-4eac-96b6-8a47b70adef3", "value": "24576:qC+tMx97N2sglRQHjzi3ew9n7wRx8ox8McK3TH1DRSouZ4WkAvSOvdyLanoNk0AN:q3M9xUM3ilp7wZUaH1DuuZVNXgyv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745001926, "uuid": "df1bd47e-f45d-4fba-9667-30a41e53e0e0", "value": 1928704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745001926, "uuid": "ebc027f0-9f45-4ec1-b863-3f51e693ec1f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5a46b0a-1c86-11f0-82df-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1745002534, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745002534, "uuid": "f05315e6-1271-465b-8db9-5ea3b00f777b", "comment": "Malware payload (LummaStealer)", "value": "8297e2c2b056e559b35adef31360c497", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745002534, "uuid": "1e307209-abe5-4ecb-8cc2-581770ec7681", "comment": "Malware payload (LummaStealer)", "value": "5e56a1d101ce774af1b1cc3a4f6d23dc94acfc4c4d87c2a3be6803db71c20111", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745002534, "uuid": "60c5f159-04ae-4bb6-b0aa-71ac6666fe09", "value": "T14B251212218249DAFE7711BA96549651B233BC62433DEFEF02F4D71A1E039E14E3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745002534, "uuid": "7b264c71-c483-49fa-b495-ffd490666e38", "value": "3e2a6ecfffc5d43a7565ef87874e92c4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745002534, "uuid": "5432d4a4-a9f6-4812-a91f-4623b5728917", "value": "24576:xgvFaKQdEtE191kc97IS+/VkAUwE191kc97IS+/VkAU:mFJnC9kc97FPAUF9kc97FPAU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745002534, "uuid": "0a6ce805-8b76-45c5-832f-450a4a8323ee", "value": 998400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745002534, "uuid": "7598ba6c-8e07-46b1-ab1f-e31dd4cd468f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c8e741b-1c8a-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1745004076, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004076, "uuid": "76883f1b-cf05-4812-9390-a16000a9b67b", "comment": "Malware payload (CredentialFlusher)", "value": "91f23aeae8dff8cb09fabd0102e5a012", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004076, "uuid": "98f1ea2b-3ae4-4c68-9420-62e5930d5378", "comment": "Malware payload (CredentialFlusher)", "value": "7be99276f38238c051fdc1582ec2fbaa9554e1aab63f66be446df8ed8dcdc4c4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004076, "uuid": "bd7fadaa-de77-4604-846f-f1e040f8a3af", "value": "T1D5259E0273D1C062FF9B92334B5AF6515BBC69260123E62F13A81DB9BD701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004076, "uuid": "6ebc6130-c7cd-4c3f-ad6e-0f026b16d836", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004076, "uuid": "67d3fda3-8fe3-453d-ae39-b1316374dd88", "value": "24576:OqDEvCTbMWu7rQYlBQcBiT6rprG8aRDLl:OTvC/MTQYxsWR7aRDL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745004076, "uuid": "cd2a1fee-cd3b-4ee3-bd49-38cad2bbe4e5", "value": 969728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004076, "uuid": "b70df477-ae84-47fe-b9fa-4625e14cdbe1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e45d1a0-1215-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745004487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004487, "uuid": "41692e12-61f1-4786-98dc-27fec3ce3d5a", "comment": "Malware payload", "value": "6fc79506f7a86ced54c4a47039fab00d", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004487, "uuid": "f7a31052-63ea-43b2-a232-b0600cd974a0", "comment": "Malware payload", "value": "d5ce142ae68ee5061d4dc260ebddd1b4594c2a28c6eefd51a1220a3c830573f7", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004487, "uuid": "0fbcc120-a9fc-4434-87ee-72f47eb2ee39", "value": "T13ED42395125A128CE0F25B34527EEDA64CB178B33509B7ED4E51C74CAEBBAD2F6483", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004487, "uuid": "ff944b88-5030-4eeb-99f5-2ccf11391d79", "value": "26354c94437921100ddaecaefb3c280e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004487, "uuid": "220d9eca-43ae-4cb6-a70d-4551680f064d", "value": "12288:1ZG+IHHDd120GEoWp1A8ZJpxY27NHans/jCzCVMUt/RS0CZ/IT+:T6jL20GQpzpxY27kAQCVMUt/804/Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745004487, "uuid": "18cac00e-94a8-462b-af9e-537b62041300", "value": 641024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004487, "uuid": "d5025969-b9ef-44a4-92f7-6c6e40261e8f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "420c11b7-1c8b-11f0-82df-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1745004488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004488, "uuid": "401a4e1d-fa53-4772-b075-48d694430c62", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "5a2645432fc376a3dbc674d75b6f64b1", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004488, "uuid": "aa958420-7175-460f-be55-0df1531f7c78", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "89ee01a4673be16fa3ad683e6cc97193d6d5e2baf43056f8ba1fb88828dbd9de", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004488, "uuid": "cd169db8-bf24-42d7-be8b-3e6b782f5b07", "value": "T1B1A53394DF3A7E64E20F4D3D27CC43397C7073F1E36AA51A81656EC989B2A1F66029", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004488, "uuid": "7c6c52ba-9be9-4090-8222-c3333037551e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004488, "uuid": "578c89c1-b145-4671-9bdd-82bf7685a483", "value": "49152:O3S80f1vvGoEAhlxK2Wvn3EoW0n7oGmJ/uSHGG2uFH8hVoNu+:G0fXEARK2i3a8LmJMGL9cos+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745004488, "uuid": "80f3efd3-a9ec-4f50-b15c-746cf6d7c3c6", "value": 2103808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004488, "uuid": "3daeb2f7-f365-4118-bb9f-1c66ee4289ea", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54b1a86a-10e7-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745004488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004488, "uuid": "f436c6cb-e881-4e5c-bcc8-8e8764ef65ec", "comment": "Malware payload", "value": "61d5ad6d285f4f7f44b24b3a41291f3e", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004488, "uuid": "986df365-d5d5-4593-871d-4be3b5f04a41", "comment": "Malware payload", "value": "6c1b47097c2bca5ba4804110a25bd293eccaa615d781aa41fa6fff0133d65d98", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004488, "uuid": "5aee41eb-dde6-4e88-b6c8-6e02fa2076b5", "value": "T159952352F513797ACAD4CA7278E59FC07AECEFC89416D140A6ACBE2F10377D0282A4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004488, "uuid": "8c0f5fae-098c-4c91-a318-4cded981a0f0", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004488, "uuid": "5ee7b870-a091-4a87-86a4-a73901293059", "value": "24576:vannIffeFOxCz9YmC+CvoY1HAo9hbJnxfFjpLffLQ2g3n2j5tFtJQrKCHExj4tAZ:ueeh6mClx15N9n0J32j5rQdHExj46gG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745004488, "uuid": "dd906af6-cac5-45a9-af96-7cd3ff1f5a68", "value": 2036224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004488, "uuid": "2eacf651-e81a-4659-a935-281c9cb7c762", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42eb99db-1c8b-11f0-82df-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1745004489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004489, "uuid": "979cf069-3941-4e30-a61b-8dd2c360487e", "comment": "Malware payload (GCleaner)", "value": "e51da452a682e145294cb17f15163382", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004489, "uuid": "e754452e-a03b-4381-9771-5b1ab3c56ec6", "comment": "Malware payload (GCleaner)", "value": "47fc4bb71a9f2b6aef957f0a74ef50a39a858b917cb6e95fb8c9ce17502388d0", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004489, "uuid": "575605aa-b19f-4e1f-9f5b-ae9d423fc4ec", "value": "T1D92633309E945F1ADDDE65F2664CFBA4F3A7304C9CC1FF1474051A85A2FEE2889B82", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004489, "uuid": "6f0894d3-3af1-43b7-ada3-4f2e871557d6", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004489, "uuid": "7e474725-e71c-45c8-8cd1-9c54830693aa", "value": "98304:jjIsv0fKWXf6X8fPNYz1v708bymwnHdlb8KgMkNDCdZ4dU:j1W96XUPNYzFhW9lmJDL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745004489, "uuid": "3ef37e82-4761-49e4-b132-89c48ae30072", "value": 4579840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004489, "uuid": "4cdbd87a-b93d-4459-aa8f-fe53bcdc3611", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43c75a86-1c8b-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745004491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004491, "uuid": "bc2b5176-f6c0-4d09-a0d8-b6249681c333", "comment": "Malware payload", "value": "2092e90739b3c899d1a4a45e3840bf2c", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004491, "uuid": "8a060ac3-71ce-494c-bc82-cd44987df182", "comment": "Malware payload", "value": "fe18dba2d72ccf4a907d07674b18d1bc23e3ea10f66cbf2a79e73000df43b358", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004491, "uuid": "c03ddfe9-d07c-458b-b029-b2cf49f0ddd7", "value": "T12C563323D4A41691CA9D4BBC8D67C7E25DE000F5D65FA02D76800BFA5B2BE162D12F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004491, "uuid": "349e2668-5f0e-46ec-b438-1f212983dd65", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004491, "uuid": "d8dff2cd-1c31-4aef-aaf4-2f21940cc97d", "value": "98304:p9rrZj94SZ4CSgkBIRmrBaKyIr3eZaTtozKvrAhkgzXA0yqMNdu:8SgQmxOComAmKXp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745004491, "uuid": "d5fc1386-d09e-40d9-89d6-f5b9f6166552", "value": 6006784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004491, "uuid": "55aa2ebe-d3f7-4408-9fad-eeac85ab0bee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44bf2efc-1c8b-11f0-82df-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1745004492, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004492, "uuid": "397352f7-cf25-426e-b580-952e7d4cbb3e", "comment": "Malware payload (LummaStealer)", "value": "ca50d7802cf4ea064254d5dfc799d689", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004492, "uuid": "b59ce5f6-222a-4b1d-84dc-8d09758eb242", "comment": "Malware payload (LummaStealer)", "value": "c2a43d11ab2e7c508c9524499dc99072d28ad1322d2850f1bf31fa85565cd2fd", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004492, "uuid": "47393e79-461a-4b6d-9c9e-8b8f1542a695", "value": "T1F3273323F2C7E13EE04E0B3B05A2A56094FFBA5465266D1396ECB89CCF265511E7E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004492, "uuid": "3c62edb6-9c63-4935-bd35-ee98e3e48add", "value": "40ab50289f7ef5fae60801f88d4541fc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004492, "uuid": "04e55acc-da80-4f8f-a5be-4302b6f575ea", "value": "393216:lSg7WQ19kFyg06E0Ci0C0qrFsphuyrdCAhuDKGcuccN0+1UCiXCnlEvJ1Nxv:0V3FRLE0G20nBRYDKTC0CyQij", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745004492, "uuid": "4206dbb8-f25d-411d-a0ad-4551aedd4355", "value": 21427301, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004492, "uuid": "98d117df-d304-4485-abd9-e665afea7968", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5305bd7d-1c8e-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745005805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005805, "uuid": "2175c02b-4a0b-4afe-80e1-9f8335a750f1", "comment": "Malware payload (Mirai)", "value": "488ba3b88f5c5b0bbb791a20031b336e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005805, "uuid": "18e2cfd9-2b43-4032-b53d-7d4427cdaeee", "comment": "Malware payload (Mirai)", "value": "2da828d18b3d565c9d7026fe49adbbc0472a3240c446848951dae4a1ddef5a7d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005805, "uuid": "b56beabc-e980-4903-8817-943fdd1f3a27", "value": "T10C5153E521554E316CA6F96361EE444437EBFE9130F25F1CE8C8A8E7816CE41724AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005805, "uuid": "6513792a-baad-4321-b9dd-92f890c294f8", "value": "48:v+tC4+ct+vjvz+0e0/e+070CV+0A010+0B0sn+hqhh+rn+jb+ip+Mn+0Y0tv:v+tH+ct+rr+pv+Wl+V3+EF+hqhh+rn+Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745005805, "uuid": "11a83c1b-1e43-4035-b2a7-3be0c4aae4b4", "value": 2646, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005805, "uuid": "7db57ce2-6e96-4a98-af57-dab9682099c5", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76f12409-1c8e-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745005865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005865, "uuid": "d2909cd2-1b92-4c28-971a-77040111ce6d", "comment": "Malware payload (Mirai)", "value": "1bb6d1eb5a4f96c0d643c851449fa2c3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005865, "uuid": "673c8608-38c9-400b-8ffc-8b96ae8bbfb6", "comment": "Malware payload (Mirai)", "value": "351c51bde936cb7451ceb7867a431c90ca89577e27cbd303eae1889d95312921", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005865, "uuid": "2ba16828-4596-452a-9497-d2f99d4acd27", "value": "T10B736C21BDB62E27C0E468BA12F34710B2E2735E34E4C61D7D720E8EFF256A024576", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005865, "uuid": "39fbe9d3-f0be-4556-ab7f-044dd27bdb1a", "value": "1536:HZOu+rS1x40U27jmrZ5EJRhBK26iKvoRd5XC7R9:5Ddy0hW9mKWKN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745005865, "uuid": "fdc6a77a-e899-4ceb-8cd6-a2bb439a2d4d", "value": 76072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005865, "uuid": "d9e87327-ad3a-45a4-9d6b-3e1fb3c17006", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7706e4c2-1c8e-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745005865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005865, "uuid": "0c6d53b9-41c1-4a26-b26b-d94782463703", "comment": "Malware payload (Mirai)", "value": "18effae69b9756875259863ef4c38236", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005865, "uuid": "1636dc35-4ee6-4559-a45e-1e7e5ff5b4f8", "comment": "Malware payload (Mirai)", "value": "7b359ed63a9aa43a9312261299863501b9414d8756c790a25110dcb7d20e24b1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005865, "uuid": "fb40a3c6-c447-4784-a7a8-f060a7a99e43", "value": "T1FDD2D182C0EB9DC0F5CB7CF4289C95D61B980B9967A7C8F260D52F02A356A0F4DB15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005865, "uuid": "db12ba80-b71f-42c2-a460-b45939236de5", "value": "768:KGkrIS2Sh8Ej3dS7+ilfHhyBCW4uVcqgw0XJJkmWy:+rISl3dARRHhyD4u+qgw0fb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745005865, "uuid": "9de14089-9a73-487f-92e7-67dd191324c3", "value": 29700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005865, "uuid": "40a459ed-af03-4b8d-bff0-0b305e4db114", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7725f4b0-1c8e-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745005865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005865, "uuid": "12ddce38-c881-4822-8a7d-03fa6ad60182", "comment": "Malware payload (Mirai)", "value": "630013b206a58f8f680de2b14313d621", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005865, "uuid": "616b217f-7285-4d9f-adf7-a6b8806e79a5", "comment": "Malware payload (Mirai)", "value": "cf6807632eca926ef60bc98ec8981dfa42db6547882b519c1038a9c12d7e9435", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005865, "uuid": "796b18a8-9e79-45c7-a24d-ddee1075fd34", "value": "T109734B95B8009D7DFD0AF6BE85260B08B96133015FA30F1BE767FD972DA31A85D0AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005865, "uuid": "2a1f156f-f060-43bf-b65a-d7036125879f", "value": "1536:TyeSa/fjkvHfhKVs08XRe0ajdJBa8kyB4rGL7rpAq2frks9h8iwJa:TyeSanjeHfhKVs/Xg0ajdJBaJ3gfM4Sn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745005865, "uuid": "ecd52714-7c70-4720-87f1-9ebc2b2ed53f", "value": 73812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005865, "uuid": "d78fcbff-0cf3-4902-9fb8-198191cffa51", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "773d7850-1c8e-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745005865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005865, "uuid": "c9dd17d7-9560-4e1b-b10a-0c6e21569f7d", "comment": "Malware payload (Mirai)", "value": "08b5579e9b38679f68f01d38412ff33a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005865, "uuid": "b4d48b67-3770-441d-b393-c4ae2e9f5269", "comment": "Malware payload (Mirai)", "value": "63a6bc9c06fac854adecfef29985edbbdb885586b17c168b556a7b2c287574bb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005865, "uuid": "d64451b8-ecbd-4401-968c-edc6127798cb", "value": "T166E2E06EDBD51DCAE6ED2C3D01D63205DC5C22CA645FD2DA43050C48BB7F98A72991", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005865, "uuid": "d060e181-9397-4121-a202-552025e9b40d", "value": "768:dpFOLBeYQO3lpsiaSupwDgQHPd/pRZaXuWTNDO:Yoc3zPaSupwDFHPdHZsPNq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745005865, "uuid": "f68e416b-04db-4b15-b517-99ca302c28cb", "value": 33300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005865, "uuid": "14c92ae4-48a8-49bd-b5e3-0cf0b3e07831", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9adf3e72-1c8e-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745005925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005925, "uuid": "1969ad1b-9dd1-449d-a070-9a073786c559", "comment": "Malware payload (Mirai)", "value": "38d82d2ea223993fbc279075f37260a7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005925, "uuid": "68c3e5ba-768c-484b-87bb-581e7d78dd47", "comment": "Malware payload (Mirai)", "value": "1321a2826a49a01a4aee401eb8a7d85b8869e2b54223ad9151eb2aa927500aaa", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005925, "uuid": "2276a1fb-b779-4d05-b63e-cb653c8e0b80", "value": "T1FAE2E06C1703B8A9E84561F122B907652E368EEC52C7ED0E58ED91F2CE125BD7C933", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005925, "uuid": "85805989-2ca9-4705-8f2f-8b0b984febb1", "value": "768:r0zBBfu39LOtpciHqCmRX0nR0goV9WvR72KiAcVuH9cJgGlzDpuWz:rmW39LOtxHq7Rk3FidVEWz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745005925, "uuid": "6491952d-b75a-4ffa-a5cb-eb2906caacee", "value": 32048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005925, "uuid": "203d98f2-51f2-40f3-89c0-85def447a933", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ae0bd39-1c8e-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745005925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005925, "uuid": "f0443282-e188-4b93-bfb6-eeedc12fcd13", "comment": "Malware payload (Mirai)", "value": "ab0c5c472c7b2179e06d19288cdcc1fe", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005925, "uuid": "1a1144a9-9376-4b3c-9746-81d2d653b2a0", "comment": "Malware payload (Mirai)", "value": "85bf7e4c9440234d214d7f263121c79d0962ee116aeb5ab3685220829a94bef5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005925, "uuid": "68b1b32e-9236-44f2-bb96-fc6fec146c56", "value": "T1F6E2F2E6C6C0AB42D4CD5274749F728B8B78DB0881741B72EED8597BDEB1F3502281", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005925, "uuid": "b0c776c0-4842-4b75-ac73-d1ade9123066", "value": "768:LPc2jNgE4es44J3w47lmC+kQCWPvsNUKphtpYtxyQMMXnbcuyD7UV/29:PhgEXs44JgdC+kQtCEqrMXnouy8o9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745005925, "uuid": "58ceadff-7105-4dcf-b78f-436ebbe2f0ba", "value": 32160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005925, "uuid": "5cb6b1c1-dd31-432a-be32-7d7e06c3e04f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ae16c1f-1c8e-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745005925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005925, "uuid": "a9a31b6c-b04d-4c43-961c-40095b460704", "comment": "Malware payload (Mirai)", "value": "d0f1b252bd01eec34e35bc4fa7a6bb53", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005925, "uuid": "eb47a5bc-237e-4326-bfaa-ca5ba66c7f85", "comment": "Malware payload (Mirai)", "value": "ffee0e6b7173221b17db16db6f57a20be846bcc0991f6788ba75dfcd3a308ebf", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005925, "uuid": "11c4e06d-7bd0-4940-9969-af0b2e4fdf5c", "value": "T176D2E0D7D2E04E02D27E623C2D5FAF978480116E74A88273FC4835AF5F76B1426982", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005925, "uuid": "5022a09d-7b80-4701-b327-3cb8d0752ad7", "value": "768:T2nB/sabcgOaw9F7ucWZAAoLuTs9ielDWlfXgVaJfUznbcuyD7U0/2Kt:SB/jbcgSLySAhXxOU6nouy8jKt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745005925, "uuid": "9bed96c6-3041-406a-8d0b-38b9be08482c", "value": 30432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005925, "uuid": "de33f03c-ee3a-4f9c-a131-5dffc79c4382", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ae27cae-1c8e-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745005925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005925, "uuid": "e4545185-c8f3-4241-be1d-d8751cd740d9", "comment": "Malware payload (Mirai)", "value": "e59435ddacc794e3c30dbab3b7a7e228", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005925, "uuid": "e5d44261-3316-4ef2-abfb-7d1b53a40e5f", "comment": "Malware payload (Mirai)", "value": "5225a57dbe82b0740105674b1379d119cd380d4d688b33e40ea6ccb94bd4a7fe", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005925, "uuid": "31862334-1183-40ee-86e1-fe24275a5568", "value": "T1529329B81995B67CEDF35079F80310EA29620A1C3B9CD1E379C7507AFFB4B086169E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005925, "uuid": "6527bd22-b24b-4236-bd2d-2a535f571044", "value": "1536:ZVDYy1P4GWswaWTgJukc4EfIRg1uqzMzJkS+eUZa8SoYR5nSr:7wGWTTFl40JuqzYJkShWa8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745005925, "uuid": "8e8979c4-26c1-47e8-a461-9b2773916f32", "value": 91592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005925, "uuid": "44f2dc7a-8595-4de2-ab1b-486981aa183e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b0253f8-1c8e-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745005926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005926, "uuid": "5caaf8a8-eb28-4600-b5c4-9eabcff3901c", "comment": "Malware payload (Mirai)", "value": "7f20dd074a0336546b358fbb82cbb702", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005926, "uuid": "baa2cc4a-41c5-4f06-a28d-65a444c3de72", "comment": "Malware payload (Mirai)", "value": "237822a1d18434a5a38e3c381e35215c48ff9544d03068e4abb1e23e490910fe", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005926, "uuid": "7d049b3a-15c9-476e-81dc-bf703aeceb25", "value": "T1D853BF71D47A5CD4C2990634B2E6DE3C2763B800D5232EF18A5B47BAA40BAFCB15D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005926, "uuid": "e8a69bdf-9997-4597-bcd6-b589abc26930", "value": "1536:CEa9joQ/A8fCN6ulY27gDqvsOxYjiv6swqpoRwCzj6o3d3nSr:ZipY6b2cEsvbswqpoy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745005926, "uuid": "7f5a007f-d96e-4df9-a6db-15e062e3a6b2", "value": 66648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005926, "uuid": "a103ca5a-a677-40c5-935d-ea38ee53b51a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b465a3c-1c8e-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745005926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005926, "uuid": "862af4b3-c177-429b-9836-e30d40be6e5c", "comment": "Malware payload (Mirai)", "value": "52566edc484f8b65a1d7db45f4c777d7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005926, "uuid": "75e6244c-4ae6-41cd-8183-abccf7f47f37", "comment": "Malware payload (Mirai)", "value": "0ef04fe892afe0285e17e6c0d82dfbadb4a5539cd84e6c342f247918caa06658", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005926, "uuid": "cfcfd5ac-bd44-4c77-8f63-acf85a42f4d5", "value": "T18EC2E03038CAA058C27A8E751C31C763EBB526B8D13B752B611D4E155D8226A2FFDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005926, "uuid": "e1b57b08-2140-4584-b569-6ffbdd0c866b", "value": "384:pjzAIO0tRtaU7pXvU27RQJckbla52eQZToGCz8aaG2FDmkRDba/Kd+rEomdGU577:pnBHrlFR+oGCz8aaxDw4o3U0y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745005926, "uuid": "defcd337-757e-4fd9-88ba-a3ff378a3abb", "value": 26732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005926, "uuid": "f3e8db3d-9bb2-4e67-b5a5-3c0a8505def2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b4b9560-1c8e-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745005926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005926, "uuid": "d1b64f1c-9b7f-437d-a4d8-c3b20e1363e7", "comment": "Malware payload (Mirai)", "value": "270620608834a91e8981e1c36f0c1f39", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005926, "uuid": "d90ef513-743d-451e-a169-3a6fb59e6b14", "comment": "Malware payload (Mirai)", "value": "e1695aba35a3417b4fbbc8b66f17acdd334781a9122caa67dcfa89c237880e4d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005926, "uuid": "22304a43-af8b-4ac3-8025-5204a48baac4", "value": "T149F2F130AC365B38C7D91872AEB7118F674A09F481FC34FB128C8866D0D2D875BF56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005926, "uuid": "0b18a8a4-e770-4ef0-960f-8aa269be979d", "value": "768:ceC6Spu24fWKPdJ+xTgAyIK+bTB1wnOtTrpRpP0VD0kVv0IwTq3UirCI:Y19CXA1TBKOtXTpP0VBcIwW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745005926, "uuid": "08562fb7-9010-4a23-9ef3-f1446a3aa820", "value": 35356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005926, "uuid": "1c415dee-777f-4d55-9621-665e92bb8933", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b793d60-1c8e-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745005926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005926, "uuid": "e098343e-a550-4712-871a-f265d2e8fbd9", "comment": "Malware payload (Mirai)", "value": "6755a510e98cfc165987022cb0580b8e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005926, "uuid": "d0e7af5e-7734-4e45-bb10-ba5272d4568d", "comment": "Malware payload (Mirai)", "value": "4d7ef163aef0b9dff6769c634cc7da87476c34dcb96631a94fb499ee00f2241e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005926, "uuid": "3d2c4abd-ade6-4bff-b59f-122cdc377065", "value": "T1B64302A4B393E682627700737AA94099378EAED0FDDD28E671120FBC7DD06468DB51", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005926, "uuid": "5e1e2cbf-dc75-43ec-9e54-2e510136aa59", "value": "768:THSmxFfY6hDk07B3bWOJCUPeoGsuibY8Q5LBFwSqWj9VZq3UirSedzaGjCXvnb3g:GmxVza0pWAFuLqWJFLCCXjLIV/2W5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745005926, "uuid": "f081e8cb-d432-4bac-b9f2-d079bc2d8a5a", "value": 55384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005926, "uuid": "61f4a26b-5cb2-48e0-b358-5a63c8e10bb2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b880fb9-1c8e-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745005926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005926, "uuid": "29d5622b-e276-402d-9758-1e3362d1a136", "comment": "Malware payload (Gafgyt)", "value": "ad801542331ca6d5c9c0ab27d72b3bea", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005926, "uuid": "e1a09e65-d8b4-4350-9a33-27245a1a6519", "comment": "Malware payload (Gafgyt)", "value": "d88a0d0d97408cbc7e9af359a9f0fd403d1793069dd6e852d3a3f44df2e91ff3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005926, "uuid": "649ae4e7-8703-4058-9fc7-957fb6d8efa6", "value": "T1C3D2E1F2430314A1E2F24A7148398A0853079A70A4F7F6D25381CAA6FDE247277BD5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005926, "uuid": "cabcdc22-08a3-43ba-acf3-ab6849054a99", "value": "768:G/eFQmr+CD+dhaaKR5L6JsfQJYFKoAboCKZB3UA:XFQmrThF/QJ6KoAbeZb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745005926, "uuid": "605a8c31-b631-4128-9dd7-3df1407a4c8b", "value": 30612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005926, "uuid": "447b0beb-b66b-44e3-869a-d265c70157ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29d0d20a-1c8f-11f0-82df-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1745006165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006165, "uuid": "040e89c3-f987-4356-ad23-dc4d876b01cd", "comment": "Malware payload (CoinMiner)", "value": "bcfdd70075face0fd2a01446a558b534", "object_relation": "md5", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "CoinMiner.XMRig", "colour": "#354D4B", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006165, "uuid": "1a50212a-9e46-4a66-a85c-e503f92bc933", "comment": "Malware payload (CoinMiner)", "value": "6159aba03b2ba450af94705a9cc7f7e53ee712316ff4ffffc43b93019cdad8d7", "object_relation": "sha256", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "CoinMiner.XMRig", "colour": "#354D4B", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006165, "uuid": "41aef291-23ca-41fc-936a-02568da1e430", "value": "T169314A2E3208E630EDAECF5516F85351E4574B7FF642E82C9193B1A4B4A85F08AEF1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006165, "uuid": "fa866743-ce51-44b2-bdb6-add71c8eeaac", "value": "24:w7tKmZ9fVoHt9SpW5mieqYWZORba/p4BlfLEpMyA3z58qmbsQS+L8oVb2YpbAU6h:8fWipMmm7ZVEVQpMyQ5dyLrc+FQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745006165, "uuid": "8d429b48-2fdd-41f9-a328-e3808c69b751", "value": 1735, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006165, "uuid": "7e1d7847-505d-4e6c-8a69-9d8ad9790101", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a7ab1ed-1c8f-11f0-82df-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1745006166, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006166, "uuid": "043e75ed-ef73-46a6-8fcf-0701c8c9c6bb", "comment": "Malware payload (LummaStealer)", "value": "256934d3a97ea4e8ca4bf8489eb74ba0", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006166, "uuid": "d641b470-f367-4582-972a-bb015f5463ba", "comment": "Malware payload (LummaStealer)", "value": "e928e5abd508ae3b3829ea1b31de9474b842e159a54ecfd8b119d3b3375e79fc", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006166, "uuid": "a21e333f-4cad-46d4-b795-a5600ac5dcef", "value": "T141748D0AEB7789B0C98A49BD21DFB37F9A3417115728CEC7E7D0CE8075136E6153AA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006166, "uuid": "300100fa-d5ae-4d66-bcba-fd892f0bf830", "value": "90ad25e1fabc59d669f036efd3d48cc0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006166, "uuid": "5d410b30-d428-47c4-8243-a7a744673d3d", "value": "6144:6CAgSVCeMolO3QQF3HgLZ+nkj2TY7F2rZ12/9Txorb2nLC4:6TnAeZlOA7LUnwRxo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745006166, "uuid": "d16cdbc6-cbfb-49ba-865a-4323913eee69", "value": 355328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006166, "uuid": "9eac5feb-3f5e-438a-a705-d410e4f95540", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2aab9e70-1c8f-11f0-82df-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1745006167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006167, "uuid": "69a59be0-603e-42f6-94b6-ba4c24e1126b", "comment": "Malware payload (LummaStealer)", "value": "fefddee99d08955e17d0896304e70801", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006167, "uuid": "a3962746-f3fa-445a-9102-b60292fc15fc", "comment": "Malware payload (LummaStealer)", "value": "cc4bc7b9432ef14e4dd22ad2886789d88603a4ce37d83eaa061aa6b449a01bb4", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "be8ed374-6563-492d-9239-4ecfed01d1dd", "value": "T12725025213D288EBFE6741BE5A515A41F573B822832DDAEF02F4C31A1E179D50E3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "b2d0c60c-12d4-4816-adfe-2e0b7d9ff58c", "value": "3e2a6ecfffc5d43a7565ef87874e92c4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "4ceadee1-e0fb-4f23-bd6b-95d0d175ae1d", "value": "24576:HgvFaKQdESO85UdJocaPQBeO85UdJocaPQB:oFJnSnsJNkKensJNkK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745006167, "uuid": "9c8ba24a-78a4-4e61-b655-43c55c652a27", "value": 993280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "5208575a-f647-499f-8fe7-bb44153beb42", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2acd1d4a-1c8f-11f0-82df-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1745006167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006167, "uuid": "0cb6e2c8-fd9d-4c16-ac40-8975221ad616", "comment": "Malware payload (LummaStealer)", "value": "5a1a6fed1e75e7d16f2911cb5177e5fc", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006167, "uuid": "ef74a1d7-d61d-41e3-9edf-5ec3eff582f2", "comment": "Malware payload (LummaStealer)", "value": "2aff31bdceed490bef990645260e7a5f04fa1742e377cf0b1724e2c4103c5f9f", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "28d05115-9eba-4ad4-a879-dde1bc791f09", "value": "T1A8250225D18641EAF2A702B268516751F533BC6747288BEFA2F4E3263E13BD00D3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "903e0b9b-32b1-4327-a9fa-ef08f0699f21", "value": "3e2a6ecfffc5d43a7565ef87874e92c4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "35c8a530-146b-43ea-96cf-dc7c7da0a447", "value": "24576:JmfZxGTSfMwnFOQtbuxw8uDSfngTSfMwnFOQtbuxw8uDSfn3t:JmfDG2E/QxuwXang2E/QxuwXand", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745006167, "uuid": "7c390201-3716-49ed-b3a2-844429808ff3", "value": 1030696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "4649ae41-19a6-4629-b2c3-88910b24c2a3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ad3aab0-1c8f-11f0-82df-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1745006167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006167, "uuid": "17681b0c-1add-4394-bb21-4e63b4abb4a4", "comment": "Malware payload (LummaStealer)", "value": "facac47c2741962b87a61e8c7c6e3c5d", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006167, "uuid": "8453a4d1-4366-45f4-894c-d95bea9d488c", "comment": "Malware payload (LummaStealer)", "value": "7e012f12c9bd81c5d9ae00b71b2cc373539417d2c6a684f06519afaaeda9e2fd", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "9c181795-be66-460c-95f8-e52777e0db90", "value": "T1327501FD94C1C582E1018BF68573B828617BFFE69BB194CD090DBA743A33D46A609D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "997d30e8-c779-448a-b8d8-489aaf642f7d", "value": "53a679a74b50ca6693c944730be5236d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "57d1063d-eeb6-4e2c-8f22-4ed4939b006b", "value": "24576:q80L897sWSQSky+TLcgGp/FraGjiRu03lCR6lrKgWg/Jx5DyS+pNJInH:qf89Rty+XcgGp/FrLUuClk6lrtz7eD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745006167, "uuid": "e3dc3ef3-7cee-4147-bf09-c89bfe5a1a6c", "value": 1634816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "326f03d5-5962-4a05-a5e0-6bafea9bf7d4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ae9336a-1c8f-11f0-82df-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1745006167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006167, "uuid": "b0fae20b-522c-4ada-be9e-212f929e58aa", "comment": "Malware payload (Healer)", "value": "6773fe3d8115fee64511753d6be5ae1c", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006167, "uuid": "f1232714-1ec6-44c2-882a-fa4bf449ef17", "comment": "Malware payload (Healer)", "value": "c756043f2536426420941fa7cc21ece24b822fea483f6c87d6629370d1ddaf7a", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "9b15812c-a013-4ee4-8cc2-33913df780d7", "value": "T18B853392DC472229E1CD0533CD9E9D386EB81726199CF98F0A3133E1DC3E66659C9D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "3d88f21d-5df4-447d-a21a-e10de8edd2f6", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "20952e5c-7d69-4602-990c-e6b7de0ea62f", "value": "24576:lMZtPGdGOvcLRlB0p2Uea96LBFaQ3V+Qznq8xKD/mq5wy5xxE023S:eZNGAOvcWpuJLBFaQ3H8Db5ve023", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745006167, "uuid": "ca6f3eed-5be6-48ab-8b19-a5da13cf69bc", "value": 1753088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "126766e7-dc12-48a3-a4a1-8e7d86c72bd1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2aff0dbf-1c8f-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745006167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006167, "uuid": "e99c96d0-c7eb-4f28-910a-e2ad92fbad69", "comment": "Malware payload", "value": "5a9090bff9c4d9f1bd51392d6567b66c", "object_relation": "md5", "Tag": [ { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006167, "uuid": "24c55d8b-92fb-449f-a8e6-b5d9f00873a4", "comment": "Malware payload", "value": "f1ca50c7a6a48e57dc3088333f9c79f8732a55bb1eba3e73a51edd4e97cf8b72", "object_relation": "sha256", "Tag": [ { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "d2c525b8-9b44-4d31-98dc-39d99642fdba", "value": "T17255334BD6D72CA1E9BE9D7C1013F26F76027E7244258E467D2C2F02BD62E3954F8A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "4cc84468-413d-49e4-bdf0-875b617121b7", "value": "55347c971789434361ebf2c1c21a714b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "b1f4e625-465f-4ada-8d61-384600950ed3", "value": "24576:R3jTq82py/9REMsYuimdVuyvunXO1cH1OiDPvDoFRgKYSniUr8GkbQjI/zEfi:R3B2pm9RKYuHdsyvuX7HU6XDQMSnmGki", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745006167, "uuid": "b8573fc0-a6bf-4b67-a81b-1ba4361d5b44", "value": 1288704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "e229be62-0735-4dff-9b87-1b69e2efb4dc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b0759a0-1c8f-11f0-82df-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1745006167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006167, "uuid": "d1af3ffa-37d4-4d8f-9bec-70694780a113", "comment": "Malware payload (LummaStealer)", "value": "029b2c25a39ef4a9f7a4d15ead9635c6", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006167, "uuid": "c9420d15-85a3-405c-854c-4230ea1d5cfb", "comment": "Malware payload (LummaStealer)", "value": "4430b0f602410397aadb01d52ad95a6a8ca876dd79eb68135bbed4469f70738f", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "9c4fa42b-d2bf-4b24-9bc7-c54a703e9001", "value": "T13D95336E78813929C882C370D93B5E96B93BE6B0429407785C31FDBD9D6BC1376E5A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "3ab656b0-b1b7-4c32-ac37-6506a24130bf", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "72123100-27c2-4755-9908-42f2ae582e55", "value": "49152:qEI3wOTynLS3JWro62PQsgPPLdqj3F8yGRGiMC:qEEdyOZ+oPuPPLJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745006167, "uuid": "6a4dfc8f-dd13-42c8-865a-c810cc69b46c", "value": 1878528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "c7a5bf41-4148-4954-aecf-8a300a70f4c5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b0db437-1c8f-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745006167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006167, "uuid": "98617a3d-febf-4136-8835-840b98275573", "comment": "Malware payload", "value": "992d59b995988f975f177b9fdd9f6e7f", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006167, "uuid": "c1118eaf-e51d-4711-b41a-eadaa13e95f1", "comment": "Malware payload", "value": "749197db4a32523bed2d958af38e95fec63e3401aafa80643119c374b080a573", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "16164f8d-a539-43cb-b726-e1dfc26f8c80", "value": "T19555E025019193DAF29245B36A85A2A0F173F82787395FEF81F0E3251D07BD80B7E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "80eb3df2-4b56-46c8-b03f-7e46530956d0", "value": "27edcdc26ece14730711ef2521583ca2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "c48c90ef-05e6-46d9-b9b0-9e23f9aff82c", "value": "24576:U5jJoCftrTSfMwnFOQtbuxw8uDSfLgTSfMwnFOQtbuxw8uDSfLJ:UNlftr2E/QxuwXaLg2E/QxuwXaLJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745006167, "uuid": "77d4b55f-72c3-46d1-8a20-21804d3fcfe5", "value": 1351680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006167, "uuid": "7f9c21cb-97d1-447d-b7c0-8d2bff63e556", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b918a85d-1c8f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745006405, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006405, "uuid": "90082322-3d0b-4053-b60e-0a25559f3f03", "comment": "Malware payload (Mirai)", "value": "593b2748d9590899438cb4ce3506edbb", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006405, "uuid": "df615de6-ef32-4799-89e5-46c9c89d7c24", "comment": "Malware payload (Mirai)", "value": "5583bfca79ca2098fbf4a3f2607ab2145bf24abef37dedd12e9fe72f6c70a1a2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006405, "uuid": "444cf55b-93ac-4ec2-93b1-cd2562cf1a69", "value": "T1605123E5315549326C63E522A1AE440437EFADD230F25F0CE9D8ECE7826CE45728AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006405, "uuid": "2ccd4310-45f5-4c0f-b925-cd7ad286c774", "value": "48:v+tCs4+c54+vjvL4+0e0/m4+070CB4+0A0144+0B0sv4+hqh94+rv4+jz4+iF4+G:v+tP4+c54+rj4+pX4+Wx4+Vf4+ER4+hs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745006405, "uuid": "cbef16da-a6cc-4e29-bea7-2e0e3217d61c", "value": 2685, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006405, "uuid": "8d87aa6d-f3df-40c6-b071-b330ef71960a", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b91f958f-1c8f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745006406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006406, "uuid": "85c32146-4645-445e-9678-2efb8d9e7372", "comment": "Malware payload (Mirai)", "value": "0e52d6607ff66b04461ece9d1af9929e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006406, "uuid": "585120ab-a700-4e66-95c4-ce37eed2cfe0", "comment": "Malware payload (Mirai)", "value": "65d1cb1f99df762a71c6f90a56f5b8a0d9d99154a411b273eb3a5061ba7d950f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006406, "uuid": "52e365a1-58e2-433a-9671-338c3c57b412", "value": "T19D5140E521554A316C63F562A1AE49053BEBFDA130F25F0CE8D8ACE7816CE40724BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006406, "uuid": "07f96e43-8f0f-4146-aa14-f98ac926c6bf", "value": "48:v+tCC+cz+vjv5+0e0/g+070Cb+0A012+0B0s1+hqhv+r1+jB+i3+M1+0Y0tB:v+tV+cz+rR+p9+Wr+VF+EL+hqhv+r1+J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745006406, "uuid": "66620a97-8306-4f21-ac51-bc334b8d5de0", "value": 2620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006406, "uuid": "5b3a2dfc-3d32-4213-be39-e83b0ff882cc", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b927c3f0-1c8f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745006406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006406, "uuid": "9a8f2210-6a95-4476-b780-7524ecf392a9", "comment": "Malware payload (Mirai)", "value": "d2b9e2e2e2cc0e32472b502fed757be6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006406, "uuid": "3350e38f-3848-4e5c-8e67-3077bc9ea5a4", "comment": "Malware payload (Mirai)", "value": "3dd60e242637d71115a6b427486317306cc8b4b89c8ee74d4cb8a9bb81dc966f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006406, "uuid": "c2b9fc46-3e40-406b-aeb0-d06c1e7d13d7", "value": "T18C5133E521554A316C73F526A1AE484437EBFD9230F25F0CE9D8A8E7816CE40724BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006406, "uuid": "efed0241-b354-4b5a-9978-d9e3ebf55e3e", "value": "48:v+tC4+cX+vjvh+0e0/i+070CP+0A01U+0B0sF+hqhb+rF+jZ+iT+MF+0Y0t/:v+tl+cX+rJ+p9+W/+V1+Ef+hqhb+rF+v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745006406, "uuid": "98621687-88b5-40d7-94d2-6f40fda1ff2f", "value": 2633, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006406, "uuid": "df845d89-9f09-46f9-a46c-cb36f4f77119", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b93aea8c-1c8f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745006406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006406, "uuid": "5f51f11f-4638-494e-96e9-f331e176b9c9", "comment": "Malware payload (Mirai)", "value": "10fb09bb7e62c0d17ffa5261c6d81495", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006406, "uuid": "1bfb057b-f4d8-40de-8810-da0040a39e60", "comment": "Malware payload (Mirai)", "value": "41a27f221c5398138f858eac85a767664250aed9c4678375c43839bc502047bc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006406, "uuid": "f9f8fca6-67b5-461a-96bd-304c808a64ba", "value": "T16E5132E521554A356C63F52761EE44043BEBBD9230F29F0DE8D8A8E781BCE40724AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006406, "uuid": "04bb7f06-c2e6-483a-9a21-971e1467961f", "value": "48:v+tCW+cJ+vjvv+0e0/0+070CR+0A01y+0B0sT+hqhd+rT+j3+il+MT+0Y0tN:v+tz+cJ+rn+pb+WB+VD+Eh+hqhd+rT+L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745006406, "uuid": "434c30ab-0460-401f-9588-163d7d41ab76", "value": 2685, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006406, "uuid": "9783d64f-83f2-4e88-98b5-7a2a8ef3fa48", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9759e87-1c8f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745006406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006406, "uuid": "11718422-6539-49cc-9f4e-f6a95e34153c", "comment": "Malware payload (Mirai)", "value": "5e2eb3d5781a1ab68ad8bc000c382798", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006406, "uuid": "13358590-917e-48c4-8bba-57af6f857a38", "comment": "Malware payload (Mirai)", "value": "3171e53d4e0d17432915ff5cdbb86a7df2cdd27edef530b6b9ca1f99e305021b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006406, "uuid": "d8933a57-87a8-45e1-bc3c-0a17e98c905d", "value": "T19B5134E525554A31AC63F52261AE48043BEBFD9130F25F0CE9D8A8EB826CE40764BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006406, "uuid": "c0a80140-8e24-4c5c-9059-30291f4f43da", "value": "48:v+tCio+c/o+vjvlo+0e0/go+070C3o+0A01uo+0B0sZo+hqhjo+rZo+j9o+i7o+y:v+t2+cQ+ra+pe+WI+Vm+Eo+hqh0+rW+5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745006406, "uuid": "5b709a5c-f11b-4454-9953-3006b0b27c90", "value": 2659, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006406, "uuid": "d3a9cb2a-5b01-44df-b0e5-80b65d6a9c91", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b97b0c61-1c8f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745006406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006406, "uuid": "b993af1c-f440-40be-8dc7-b21740ac711f", "comment": "Malware payload (Mirai)", "value": "41c15a44950f7ce5a2373c087dfdc4a9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006406, "uuid": "3fdffce2-a7b8-4783-90c0-1687e02a8aa3", "comment": "Malware payload (Mirai)", "value": "c834e4c9155f9c04fb36ab67e6aefdeb2812cfa98f6688109a50d8ac0d8d094c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006406, "uuid": "e027a612-45c8-4d78-a704-3445e7dfe84e", "value": "T1365162E521524A316D72E536A1EF480837EBBD9570F25F0CE8C8A8E7816CE41325AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006406, "uuid": "d560b884-9da5-454a-942d-33a1a22cc696", "value": "48:v+tC2+c5+vjvP+0e0/M+070Ch+0A01a+0B0sb+hqhF+rb+jX+iN+Mb+0Y0tF:v+t7+c5+rH+pj+WR+VL+Ex+hqhF+rb+z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745006406, "uuid": "bac0c75f-4986-4a7d-be27-bd355f7a58b0", "value": 2685, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006406, "uuid": "c5d83f0a-f1cc-4262-95df-b0d889eeb3e0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b99936b7-1c8f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745006406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006406, "uuid": "93d1f019-599b-486a-b8cd-8d63eb3afa15", "comment": "Malware payload (Mirai)", "value": "8ea84327fc077867fab8a20380029434", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006406, "uuid": "86712282-713a-4067-8b5a-5a1f2bd55ac4", "comment": "Malware payload (Mirai)", "value": "7c2ae47aefcea9234639d8c7d9ba48e87ac74ff91da1ce6960ce33262e364ae5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006406, "uuid": "8302c981-1077-4b1f-bb95-393db51918cd", "value": "T1C85142E521554E716C62E563A1EE484437EBFE9270F25F0CE8D8A8E7816CE40724AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006406, "uuid": "7c886027-af42-43e5-ae7c-e05df17dfddd", "value": "48:v+tCQ+c/+vjvF+0e0/O+070CH+0A01E+0B0sR+hqhb+rR+jt+iD+MR+0Y0tf:v+tx+c/+rd+pZ+W3+VB+EX+hqhb+rR+j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745006406, "uuid": "24f6a4c3-97a0-4893-a414-54cb5c1c30f5", "value": 2633, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006406, "uuid": "53e85103-2160-4c2b-a0b4-7927d81d80ef", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9a18660-1c8f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745006406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006406, "uuid": "884eddf9-7d66-4596-8110-a70458c98192", "comment": "Malware payload (Mirai)", "value": "d546ac79dafab762e165a28a68227f76", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006406, "uuid": "ae857bee-3e8b-454f-9d58-9e565645cb38", "comment": "Malware payload (Mirai)", "value": "13d0660468ff2a897a842cfcbd215af17f85a56532d35329c553f827e7d18278", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006406, "uuid": "9a5b4b53-189d-4d03-9611-af0652e0c5d6", "value": "T19C5174E525514E356C63F62261AE45443BEBFD9130F25F0CE8C8A8EB816CE45325BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006406, "uuid": "6bd7ddd6-51cb-4c72-88cb-494f12fdb4a0", "value": "48:v+tC/NW+cANW+vjvWNW+0e0/1NW+070CYNW+0A01LNW+0B0s6NW+hqhENW+r6NWO:v+taM+cAM+reM+pSM+WoM+VKM+EIM+hM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745006406, "uuid": "2157724c-bc23-491c-9d53-186950d4af0f", "value": 2646, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006406, "uuid": "135ca521-b26b-4d94-b8cc-a47d3a46d1a9", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc3e5dc9-1c8f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745006464, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006464, "uuid": "20664d40-cc6a-41e7-a33a-2c0ec7a6bba6", "comment": "Malware payload (Mirai)", "value": "43ec12fe9dbb2ec756c6b425aeccaa33", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006464, "uuid": "348a5d7c-20d1-44cf-b449-865767c387fe", "comment": "Malware payload (Mirai)", "value": "26da16e30fd45d3a682ec6deaa95edd79d218a094dc8d4429d5421a4e725a34a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006464, "uuid": "fda9831c-d2bc-4225-aa4a-affce5000d38", "value": "T16F5143E535554A31AC62E52661AE440437EBBD9131F39F0CE8D8A8EB816CE40724AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006464, "uuid": "348bcd2d-c135-48a7-a74a-0a4d1822ba0f", "value": "48:v+tCU+cX+vjvB+0e0/m+070CP+0A01I+0B0s9+hqhT+r9+j5+iL+M9+0Y0tD:v+td+cX+rJ+p1+Wf+VN+E/+hqhT+r9+L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745006464, "uuid": "a1e1e0e0-fa26-448f-b11d-a13a9d3bc1f3", "value": 2659, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006464, "uuid": "40d47542-7b34-4e85-ad71-ff2065bfe7f7", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcc036d0-1c8f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745006465, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006465, "uuid": "7f0ba190-bae3-4316-a61c-dc9a5ad4a720", "comment": "Malware payload (Mirai)", "value": "4b37a6a8490b2bbb4fc4f44beae65e71", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006465, "uuid": "244d8c3a-fdc5-403e-a81e-008a2e1e0fd3", "comment": "Malware payload (Mirai)", "value": "84d966b9b10093cfb533cc99eed1e6262e3e71669edd895be2bda97f0b8d17d3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006465, "uuid": "a64fd596-497c-48d4-af4e-bfb49ddb92b6", "value": "T1EA5153E521514A366C62E92261EE440437EFBD9130F25F1DE9C8A8E782ACE44728AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006465, "uuid": "ed72da18-e2f2-4561-ae22-396f0dd18beb", "value": "48:v+tCp+cI+vjvC+0e0/7+070Cg+0A01l+0B0sW+hqhc+rW+ja+iU+MW+0Y0t6:v+t2+cI+rq+pu+Ww+Vm+EQ+hqhc+rW+3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745006465, "uuid": "7527ffad-6cc0-494b-ad5b-c47dc971d0e9", "value": 2646, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006465, "uuid": "cf004081-958f-46df-8178-f80ef5f28945", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00658aa1-1c90-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745006525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006525, "uuid": "3d8eb4e9-3ed8-41cc-9eb5-503313d6541f", "comment": "Malware payload (Mirai)", "value": "7da8b0d9ea84063755af01a33e75f3d3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006525, "uuid": "a5666972-077e-4f8e-bc83-cb0d683ed170", "comment": "Malware payload (Mirai)", "value": "2b31eab59ad71817e20370741dcae4d4241625e7227feb40cd6893fa278082a6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006525, "uuid": "216a87aa-ec09-4d60-b9a3-149aeb3900bf", "value": "T1D751A4E521164D316D63E62261AE444437EBBD9270F29F1CE9C8A8E7416CE45324AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006525, "uuid": "6842fd86-e1ee-47d4-9510-21bf923bb705", "value": "48:v+tCu+cP+vjvd+0e0/M+070Cn+0A01a+0B0sB+hqhD+rB+jV+i7+MB+0Y0tV:v+th+cP+rl+p5+W3+VR+EX+hqhD+rB+R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745006525, "uuid": "aba004f0-cf5e-40b0-9d5a-ee065c9dac91", "value": 2672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006525, "uuid": "811bf74a-275d-4297-a9b2-36ba6ffdd4dc", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23b01fdf-1c90-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745006584, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006584, "uuid": "f7302fab-f168-4ef6-b25e-6e429bb1edbe", "comment": "Malware payload (Mirai)", "value": "5c5d0c005419c5012d5d6d38d40b782f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006584, "uuid": "8ed77f5f-8bda-4de3-9690-fddb31b29d64", "comment": "Malware payload (Mirai)", "value": "94123fca59aad7cffff4f24300471b2742eff7c63de120a9183c7cb15ad45bb6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006584, "uuid": "f91c1f75-da93-4e93-92fa-4bbc3514e696", "value": "T17F5135E535454D316CA3F92261AE480477EBFD9230F79F0DA9D8A8E7806CE40724BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006584, "uuid": "6599e039-3285-4d05-a7a6-ccf7e4140185", "value": "48:v+tChw+c8w+vjvaw+0e0/Pw+070CUw+0A01dw+0B0suw+hqhgw+ruw+jSw+i4w+C:v+tOw+c8w+rCw+pmw+WEw+Vew+Ekw+ho", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745006584, "uuid": "b7d8f79c-8c8f-4e64-8994-1e80c22bdc8a", "value": 2581, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006584, "uuid": "699b96eb-78f8-4409-af47-3345aa6816b0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46e3e17f-1c90-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745006643, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006643, "uuid": "ae080b61-8854-491b-abb0-3ae3ff042174", "comment": "Malware payload (Mirai)", "value": "0c85a8ce3bdcc3ed36e768166b511e12", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006643, "uuid": "c0459846-4b44-4b6c-a895-6b99a33f1c0f", "comment": "Malware payload (Mirai)", "value": "ffd458fefeab1ba55b1b151247a981f69e715d886fcbd4f858e5d734f44b16fa", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006643, "uuid": "61987a4d-0ea8-4d46-bb00-b69879f52139", "value": "T1945163E535914A316C72EA2265AE44047BEBBD9130F25F0DF8C8A8EB816CE41325AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006643, "uuid": "45ea8e30-7027-4a8e-a731-25f12baa2bb1", "value": "48:v+tCr+c++vjvw+0e0/F+070Cm+0A01P+0B0ss+hqhK+rs+jY+iy+Ms+0Y0t8:v+tM+c++rI+p0+WW+Vc+E2+hqhK+rs+v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745006643, "uuid": "f733edfa-1a48-4e74-a266-0d9ea3cd263b", "value": 2698, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006643, "uuid": "a7d528f1-ef95-4605-b01a-bedcfe621094", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e7f4d1c-1c95-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745008884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745008884, "uuid": "cf2842d2-b50c-4c79-8ecd-8e70c3f0233a", "comment": "Malware payload", "value": "fa69efbea811fb289709432c2558ff16", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745008884, "uuid": "3457ac2c-bb44-4542-9c1c-03b7e240a22f", "comment": "Malware payload", "value": "a144d021d60c9f3571249ede382e903ae0dcdad9959728fce11c3981e45c4e51", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745008884, "uuid": "0c3fc65f-e218-4aff-9d53-c935628d45ce", "value": "T1DC2633482C70EA38EA1A963345DF5331B1B928C0528FAA6F713E72BD351D35663B3D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745008884, "uuid": "03822c9c-3d19-4c74-a8c2-f2f16413dc54", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745008884, "uuid": "c035bd2f-1a51-4249-ac24-fed6fa4e0ccb", "value": "98304:XQ9a2EPcjMpvM9msOQxa7ue+lTFpR2/G+J6b7gqs2ml:XQFMcopvM9FpaqlTFGu+J6b7ap", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745008884, "uuid": "6df19be7-fd3a-481d-9a08-f191a17ffcbd", "value": 4736512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745008884, "uuid": "2bd1a0ea-e581-4d11-a0cc-af7fae024e36", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2413fbae-1c98-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745010021, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010021, "uuid": "ca647096-4cf7-421c-88e5-70e0666a2cdf", "comment": "Malware payload", "value": "e78a3302cd4c57c6c5ab02c199a884d7", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010021, "uuid": "69ca3183-f6a8-48ab-b098-2f5d35633720", "comment": "Malware payload", "value": "87eb4bb68722f30c26bdb7c6fe492f0c139bcb7b655ab29e64ef12749ffd75cb", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745010021, "uuid": "111d034e-34b9-4dbf-a27f-8d20b80362b1", "value": "T1FB2633EBE7C41710C26327B43FCA04355F639A628735616E7A8D4939DB70CE339BA6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745010021, "uuid": "5a261fcd-c58e-47a9-9c1a-54761fbf231e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745010021, "uuid": "7ee76d9a-8879-4f9e-81ac-04e316d01bfc", "value": "98304:0EZyoK8FZrS+quV9Q2K6sweRU4EGHPPY3t6cahzN6LaVNSLXO1:VpZrLqAvsfRDNHY3t6ca1iaN6X+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745010021, "uuid": "c0570832-d45b-4def-a254-54d36130e003", "value": 4603392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745010021, "uuid": "e77b2cdc-fb2c-43fa-9f23-08aa3b859527", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a5982f7-1c9a-11f0-82df-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1745011078, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745011078, "uuid": "0c43e155-f921-4078-9121-c303265d0d9f", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "b77fc8fd7b66eb8a7490c2b129f6c8e6", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745011078, "uuid": "d82539c2-fa52-444f-ad99-bb6880718461", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "d6a1743a104266c5ebcc9e23eb2d5f1bf1fbf565958574baa5e177b0b7b41491", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745011078, "uuid": "8c86a1ee-fd8d-4f1f-82aa-8ddb6131de04", "value": "T18EA5331726FE2376CD85917892DFE917BA17A28707E091F9309737BC908217237B49", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745011078, "uuid": "a7a78d3e-5e9f-49b8-b80d-20fbe80273ef", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745011078, "uuid": "a70a7224-22b8-4f12-9170-2ce44069735f", "value": "24576:zjsCrlrrjqJsuXcWNjCxZ2jbCIGCcTLQzT7O36Ain9bqY93Rl85vEsnRT1U0sjxy:/T5EsDAjbCGvaZ4qY93RhsRJUE4fVtI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745011078, "uuid": "7bf23b48-0143-42e1-8246-83149eb73a3d", "value": 2119680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745011078, "uuid": "1a619986-c729-4b19-9140-d8e83270703a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8f39145-1c9a-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745011183, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745011183, "uuid": "c6cc5797-1b4a-4a19-b650-8294057d9e32", "comment": "Malware payload", "value": "f5381d7b33fe6543dc94970c7dea0d37", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745011183, "uuid": "6eec0bbb-dc15-4582-a2ce-14af5528ff9e", "comment": "Malware payload", "value": "cd2ef68d5db3d801faeee3eafbdcf67732c526dbc66cbc225132cc37213466b7", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745011183, "uuid": "a6484976-adf5-4a52-908c-021ef837740a", "value": "T18995333DEC2C0265C1549A344E8B1BF53F79C8D1BBAB5E3128163775E6EA970204C8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745011183, "uuid": "1f263ec0-3900-42cc-a43a-1e0238c81464", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745011183, "uuid": "fdc7ac7b-2e28-43af-a69f-e4aae0537224", "value": "49152:U7CTTPP6lzLxeRRpm5k8jDV1Sec9gW+v:qgylnSRY5k8jDV1SdE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745011183, "uuid": "196bf61e-938b-46cf-89b5-19021ef72b4e", "value": 1929728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745011183, "uuid": "c0e44f1e-a460-4ef1-8aef-0d1707ae4e00", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c8c0f5a-1c9c-11f0-82df-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1745011914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745011914, "uuid": "4e07471c-c6c8-453d-ab19-0d57979468ee", "comment": "Malware payload (Healer)", "value": "f4832c8baa05e73704856e2e56ca0e87", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745011914, "uuid": "74d097d1-c041-4c51-bdb0-52faba4d7c98", "comment": "Malware payload (Healer)", "value": "f7f1d198063b150f09913215b062e3ffa364933838fde3df93fb3f08505c04c2", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745011914, "uuid": "45135dd5-66db-428c-a545-5aa135337c1a", "value": "T1D8853384C75082DDC34D11B58C1F43CEDA79EB7EB24D95934B82F17B402B7A8E2996", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745011914, "uuid": "85aced7a-3fb9-4046-8de8-72be2d3ceb2f", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745011914, "uuid": "8677ebb5-98a9-4584-862c-356c3120cc53", "value": "49152:mOE3DvLVtzAwNj50bY7w+D7rQ55XDo6m2:HcjLVtzVj50bYckMrXtm2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745011914, "uuid": "1cc16210-8540-4870-94d6-9a113e2ac4d6", "value": 1783296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745011914, "uuid": "b1e72078-c7bb-4470-840b-4399d8aacfcb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b46ceb6-1c9e-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1745012637, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745012637, "uuid": "ea6a9644-5dd1-415c-9e8b-a11e15d17ec3", "comment": "Malware payload (CredentialFlusher)", "value": "cc7de62ab26955db395c70278a234e0d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745012637, "uuid": "2eeec086-3bff-4336-ab46-de213d5c0d08", "comment": "Malware payload (CredentialFlusher)", "value": "6125b6aca13496e5c4959b1a76bf218b2d68615dc1af26cc49af20c71d0c12c4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745012637, "uuid": "be024629-16b6-4f9e-a5fa-35cadeca936a", "value": "T16D259E0273D1D062FF9B92334B5AF6115BBC69260123E62F13A81D79BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745012637, "uuid": "f0cb106f-71ef-421c-b783-4e55a9bec879", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745012637, "uuid": "fc8fca80-aa38-4f07-aa2c-ef0658d172c7", "value": "24576:CqDEvCTbMWu7rQYlBQcBiT6rprG8aHEAZqZJ:CTvC/MTQYxsWR7aHxZqZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745012637, "uuid": "acc12486-fcc2-4149-9cb9-ead466ba8e00", "value": 970240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745012637, "uuid": "d5427471-0444-4434-8348-0540353d21e7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96ea7378-1ca0-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745013650, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745013650, "uuid": "90234986-f954-44ee-bf24-b499bcfbbaa9", "comment": "Malware payload", "value": "c4326b44b642ecfaf6f78f811a48b4f6", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745013650, "uuid": "1bbf62e1-4dcc-4e63-b4c4-e0468bfce303", "comment": "Malware payload", "value": "ba1c1193399d1ede023dcdb18f0504f42a4b016194a4ab8c9921dacc36a22cbc", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745013650, "uuid": "54c5874b-f117-4ada-b072-9f493072feba", "value": "T1949533048CF43B6DD1453333AF389C5848247B6894BD86BCF9CAA152C799EDE71DE6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745013650, "uuid": "906259eb-9067-4276-a3b6-e30fa7832531", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745013650, "uuid": "252692ad-5001-4490-8323-9fb42b42dd52", "value": "49152:xrI7vThAYpn6IfTfx4/HjEJuFbhTrXCZfP:hI7VAYd6sfIjPFdXCZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745013650, "uuid": "a0c26593-2444-472c-9552-3a5ddeaa4328", "value": 1903616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745013650, "uuid": "c7cf0ca4-8451-4cdf-907a-6f0a05946300", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7d165ec-1ca0-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745013758, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745013758, "uuid": "32a27c24-31f4-447b-8096-a9e46260d108", "comment": "Malware payload", "value": "4caccd448ff1b47314b03a1a3157c4dd", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745013758, "uuid": "16b2d2ea-6b69-4915-abc0-286c0582bf67", "comment": "Malware payload", "value": "648898a6441cb02af45991c64ccea34ecaea43c0115a7fc04d7864b2e303148f", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745013758, "uuid": "2e69d55a-be10-4ff5-9262-6e59c2b1a9e1", "value": "T1B926334C88E38B7AD37DC1FBE90BA9DDD56620A0B9F2A8A1798543B11D43E1D62332", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745013758, "uuid": "83693c2e-931d-4f80-bb4b-d602773069e5", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745013758, "uuid": "9204b463-7126-4cc1-9bb8-080da5351c6b", "value": "98304:aWUdPs4A8XLqrcjok18z+Ol/6/1ENlnuiNn2Lr:oPLoMOly/WnukCr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745013758, "uuid": "c81b6141-7970-45e0-94fa-68e3ded646b4", "value": 4708864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745013758, "uuid": "8fdbe21f-fbbd-4c32-809d-2ac2a26dbe66", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dcc99d0-1ca1-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745014010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745014010, "uuid": "3935d395-c65e-4c95-b82e-70d847f02ccb", "comment": "Malware payload", "value": "f83cdfcb28975a20ca72984a8af5d897", "object_relation": "md5", "Tag": [ { "name": "glupteba", "colour": "#89dacb", "exportable": true, "hide_tag": false }, { "name": "GOBackdoor", "colour": "#9A05D4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745014010, "uuid": "527d028c-5b7b-4bb3-9cbe-7e688bbb7e4b", "comment": "Malware payload", "value": "4a779929ccf4a51d0268fce9c7b44143d7fb4690811939c6c1913cdefc38a813", "object_relation": "sha256", "Tag": [ { "name": "glupteba", "colour": "#89dacb", "exportable": true, "hide_tag": false }, { "name": "GOBackdoor", "colour": "#9A05D4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745014010, "uuid": "7ba9ea56-5b5d-4a58-8e15-15bf238842db", "value": "T1F9C619BC23D5C3C5E49B69FB4E6A23C2797C27751387CACB81A846B45FA0ED485309", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745014010, "uuid": "62bfa4b4-7707-495d-8a55-75524b8a8f4f", "value": "326fd86b0f25d245881dc7a4ad1098db", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745014010, "uuid": "accfeb5c-37eb-4f71-8f2a-097320b494c0", "value": "98304:41LKDsv7pcnvAprc3M9l6iU4gKFAQ36pVx80u:M2Dsv76nvApIM9oiRgKFA3+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745014010, "uuid": "de4059a4-4643-403d-a307-0b0938bdc8b0", "value": 11531776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745014010, "uuid": "e8d1bf35-6a08-4b3b-96f4-1f9db797cb1b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61e4a7a7-1ca6-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745016138, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745016138, "uuid": "b07d3c29-b70c-48b1-ac99-987fa0948ad0", "comment": "Malware payload", "value": "26a1e5d461847406465147c4e2ca7de5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745016138, "uuid": "8bff5646-2a38-413b-99c5-b008dc841fca", "comment": "Malware payload", "value": "315672212df531419373584a2825abf74212faa2e9c5cacb9063dce0d6d0ef45", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745016138, "uuid": "1b6e6538-1624-451a-a7ff-44cff2576424", "value": "T1AFC533AFDFE01D34C86E05316EB7AE12B7F182F483E2158D534661CAA77A50F631BA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745016138, "uuid": "f3619faf-6c2f-4fa6-8587-d4da95e77ffe", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745016138, "uuid": "44950c26-924c-4867-9ec0-506001427c31", "value": "49152:bQmiBPmVov0qMyuuJswpeOm6OcdpAmm381HfMkfm7Tr:sqqM2JvpsoUM+n7Tr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745016138, "uuid": "d2681382-83d1-4ae7-b3c1-e75410cd0bd4", "value": 2514432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745016138, "uuid": "aab0944f-c754-4dd7-91b4-ec3d9dc67375", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1745018285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745018285, "uuid": "c71f984e-d36b-4e22-81c5-567ee4f5d6e5", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745018285, "uuid": "c62b1f23-77af-401f-a775-7f78e6134891", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745018285, "uuid": "d87309a6-0b58-47df-bdcb-f5efb78a315c", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745018285, "uuid": "4d3208bd-f54a-4cdc-9a37-06585954371d", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745018285, "uuid": "983474f7-a26b-468d-8996-670f257d062b", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2c3153d-1cad-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745019360, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745019360, "uuid": "497f660f-d089-44b6-90da-94f6b5d8a4ef", "comment": "Malware payload (Mirai)", "value": "91ecf2449797b709cf78e0b6c903d36d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745019360, "uuid": "2e407ecd-8b3a-4f39-8d56-b7fc6c1c9ed6", "comment": "Malware payload (Mirai)", "value": "3541ad0158af46ca3bd85e671d320e08984c5a6734d970d11bc58b3ab1004f8f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745019360, "uuid": "2fad0269-c7a0-442a-8696-d9a7bb63187d", "value": "T10C234B52721C0E5BC4E31A70263F5BE08BBBA9E021E4F786656F5B168936D371482F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745019360, "uuid": "c66c1594-8e48-4cef-82fa-ba68dae2a34e", "value": "768:PH10Q7LU8jRQD+NP3b3Xf0lfzoQkRS1Zhwk1TV8A1WLzEcBMYQVRJEMdrgfnAxeW:P10Q7LU8jRQD+NP3DCfzxkE1Df/OEcBY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745019360, "uuid": "cfe3e277-b681-4122-9d4d-db8fb407f13b", "value": 46188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745019360, "uuid": "5dbb86f1-c208-43af-815e-0003f2a0f863", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09c7c151-1cae-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745019426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745019426, "uuid": "59f0423a-d8a5-47a6-8dde-b2e922ae4528", "comment": "Malware payload (Mirai)", "value": "91fa9a18686f3e227a216faf58243b74", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745019426, "uuid": "ca2f629e-1a68-4bb2-81ff-29baec3b39f7", "comment": "Malware payload (Mirai)", "value": "5ff116f7b942543699ccb2cd393a3d02ba466d8b1ef0a024c581aebde47896ec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745019426, "uuid": "7007cd19-d32c-49ef-866e-d39ce1120ab7", "value": "T1D743B62A7E218FBCF7A9463147B79E165A5833C73B91D581E1ACD7006E7024E341BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745019426, "uuid": "1014ee0d-fb01-4b1d-9842-7561c74b1d66", "value": "768:JMrf1WOtknZw0oRUO54+D4+lqM6d8QQ0Hf7JlQ6PbdvKVGTD8r4cR1/1OTpXezWI:7Zw0TQc8QQWfloYTW1OdXDZw7bx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745019426, "uuid": "d084273d-dea2-4c1a-8242-e822818962bf", "value": 59680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745019426, "uuid": "48d967f5-6398-41e3-ba80-eb05be20a362", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ca2818b-1cae-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745019457, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745019457, "uuid": "83b9ac77-b287-4dd5-a462-087b812db932", "comment": "Malware payload (Mirai)", "value": "dbbe5cdb7f87ec421ad1f73f7e851ed0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745019457, "uuid": "6a687d65-7345-4240-a6a5-a51fbea0ba09", "comment": "Malware payload (Mirai)", "value": "f07c862062a12764703883906d183d79a80b2f40ad02ca42db4c9c112bb11036", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745019457, "uuid": "e41d3d95-fe86-44e2-9f63-5a39474010f4", "value": "T1FBB3AEABF60714A1C85347F003C78F8E3E1322919F57A5EB3C5D267A29B51DB0D1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745019457, "uuid": "b18b469a-a610-4d31-a899-9baed7bab421", "value": "1536:PjSvjxCf7OFQUt0IaMer3pSSf7PyUlwcRxMilugwN+/LWK:LSvQbUt0I9k5SS+UlwSugwN+q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745019457, "uuid": "38cc0048-e5e9-4f16-b968-8c764143a421", "value": 115996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745019457, "uuid": "34d5957c-1e6c-4079-9a14-841d114f6a9b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae09d008-1cae-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745019701, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745019701, "uuid": "e13fea93-8f2b-4b51-81c5-b026407aba97", "comment": "Malware payload (Mirai)", "value": "2fa60cc90c096b1838c0cd60eda13854", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745019701, "uuid": "52ab1d3e-d392-4cb1-a27a-ad55d6818d12", "comment": "Malware payload (Mirai)", "value": "a2416ed8c0c766c841de1d61a404c0280a14929056baf6b6adeec69f2b6f7d53", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745019701, "uuid": "264c1cbf-e2d8-483f-88d5-7743c0f4e4ec", "value": "T1FC92D121549AAC72A7700039FF3CC647D3DB097DD1EE3A7425480A6833CB517A6BDE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745019701, "uuid": "b0f572fd-5c45-4331-b0fd-f006a0769659", "value": "384:s0gI5pMWijR0m+oVMgzHxaf7r0eilKHAnI29qRTi3UOhymdGUop5hIE1U:5Z5ptqd+oCgav5gnI2WOs3Uoz71U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745019701, "uuid": "4ce5d7b6-7cdf-413a-a194-3518db0032bf", "value": 21184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745019701, "uuid": "301bbbfc-e0bc-4103-9536-0ee71e9f83cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "daee4068-1cae-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745019777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745019777, "uuid": "5c338932-35fa-4bbb-80ef-a2058c10a49b", "comment": "Malware payload (Mirai)", "value": "408101b81c6839d39c52572b10f57503", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745019777, "uuid": "9a9607c9-df10-438d-bfb2-23900b293ad1", "comment": "Malware payload (Mirai)", "value": "6225ba82c8a446bbb3ea0e8b618c3a6972633804f55827ef0e821f411e9921b5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745019777, "uuid": "0527eef8-bad0-4f26-a22e-0b5ecf60eacb", "value": "T1BC836D21F979192BC0D5913A21F74727B6F247CE20A48A1F7E710E9EBF615803A07E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745019777, "uuid": "06cfd171-c0c2-49ef-8d63-d440bc93954c", "value": "1536:dGXDILo2B8f6MMcCSG9twCYm5qHSA6KtW7x:0Al+CYOQg7x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745019777, "uuid": "3b237e65-e09e-4432-8a6b-2b5ae198a2a3", "value": 83280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745019777, "uuid": "ce1f3b80-13ae-4732-98d0-4e03fd6e72d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744934526, "uuid": "5dd24a87-1be8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.78.82:55656/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744934584, "uuid": "8045b2d1-1be8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.235.148.10:43525/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744934599, "uuid": "88e58fbd-1be8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.5.1.52:33053/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744934607, "uuid": "8e1734f3-1be8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.167.146:51150/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744934613, "uuid": "915af0ea-1be8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.97.216.188:43670/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744934645, "uuid": "a4bc69a0-1be8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.142.74:53075/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744934673, "uuid": "b4fb835a-1be8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.97.216.177:41271/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744934673, "uuid": "b4fe03ff-1be8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.0.184:33583/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744934673, "uuid": "b4fe0477-1be8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.198.34:33858/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744934673, "uuid": "b4fe17ea-1be8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.151.17:46803/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744934673, "uuid": "b5654a76-1be8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.55.90:46848/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744934716, "uuid": "ceb35ebc-1be8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.238.59:34563/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744935204, "uuid": "f1a08d59-1be9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.231.147.47:38904/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744935245, "uuid": "0a11c76e-1bea-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.72.241:43059/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744935306, "uuid": "2e5188c6-1bea-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.75.57:57327/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744935485, "uuid": "99358b11-1bea-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.10.180:50150/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744935787, "uuid": "4d00cf0a-1beb-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.9.155:51190/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744935906, "uuid": "9451298c-1beb-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.113.161:39752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744936281, "uuid": "735f03bf-1bec-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.55:34257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744936325, "uuid": "8d980318-1bec-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.4.30:34770/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744936445, "uuid": "d5993b3d-1bec-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.226.47:35908/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744936567, "uuid": "1dd5fc09-1bed-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.189.31.78:51380/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744936567, "uuid": "1df6a14c-1bed-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.happyrace.shop/uy998k46z8.aac", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744936626, "uuid": "4132d172-1bed-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.24.142:40544/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744936864, "uuid": "cf37281e-1bed-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.239.226:37452/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744936864, "uuid": "cf5d753f-1bed-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.60.13:54378/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744936865, "uuid": "cfcaf77b-1bed-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.225.112:51315/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744936924, "uuid": "f2f94af0-1bed-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.139.104:48674/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744936925, "uuid": "f3b2943d-1bed-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.133.48:34290/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744937045, "uuid": "3b043166-1bee-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.72.241:43059/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744937045, "uuid": "3b4472c9-1bee-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.120.174:36636/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744937105, "uuid": "5edd0665-1bee-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.82.209:50603/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744937165, "uuid": "8258290f-1bee-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.10.180:50150/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744937226, "uuid": "a70651fa-1bee-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://197.207.90.68:40439/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744937645, "uuid": "a07fcfd3-1bef-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.113.161:39752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744937765, "uuid": "e84e0795-1bef-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.purepassionwellness.com/profileLayout", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744937766, "uuid": "e892523e-1bef-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.189.31.78:51380/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744937885, "uuid": "2f6b0dcc-1bf0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.75.57:57327/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744937962, "uuid": "5ddd227f-1bf0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.93.205:55758/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744938007, "uuid": "783257c1-1bf0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.164.214:45721/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744938186, "uuid": "e2da5a31-1bf0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.225.112:51315/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744938305, "uuid": "2a418c6c-1bf1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.139.104:48674/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744938381, "uuid": "57733274-1bf1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.232.170.159:48129/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744938394, "uuid": "5ed1fc5c-1bf1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.76.249:54143/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744938428, "uuid": "737ac39a-1bf1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.22.212:46960/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744938545, "uuid": "b8d21628-1bf1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.141.22:38548/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744938545, "uuid": "b8d9a071-1bf1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.82.209:50603/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744938665, "uuid": "009c98ac-1bf2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.52.57:55794/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744938686, "uuid": "0cfa5737-1bf2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.20.65:36851/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744938846, "uuid": "6c3fcf91-1bf2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.133.48:34290/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744938966, "uuid": "b3da8e84-1bf2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.69.61.236:54606/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744939391, "uuid": "b1522acd-1bf3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.24.176.168:59432/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744939626, "uuid": "3d3b7ad7-1bf4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.74.161:57285/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744939807, "uuid": "a90cf5cc-1bf4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.178.118:47775/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744939865, "uuid": "cba1bd2f-1bf4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.226.47:35908/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744940044, "uuid": "36c31edb-1bf5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.141.22:38548/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744940104, "uuid": "5a72b4e4-1bf5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.120.174:36636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744940105, "uuid": "5ae68296-1bf5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.89.25:46364/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744940164, "uuid": "7e528363-1bf5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.happyrace.shop/azle33dofd.aac", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744940344, "uuid": "e97a719e-1bf5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.38.117:48809/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744940406, "uuid": "0e6e43ec-1bf6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.83.117:43445/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744940525, "uuid": "555469d7-1bf6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.20.65:36851/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744940705, "uuid": "c0b64230-1bf6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.69.61.236:54606/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744940944, "uuid": "4f2ba426-1bf7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.24.176.168:59432/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744941023, "uuid": "7e3621bd-1bf7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.191.95:51327/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744941064, "uuid": "96c52fac-1bf7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.74.161:57285/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744941726, "uuid": "20fa332c-1bf9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.53.250:49939/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744941845, "uuid": "680c546e-1bf9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.84.92:37841/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744941965, "uuid": "af90c2c1-1bf9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.83.117:43445/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744942086, "uuid": "f7813db0-1bf9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.101.35:53525/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744942263, "uuid": "6103bc3a-1bfa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.191.95:51327/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744942263, "uuid": "6103c162-1bfa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.38.117:48809/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744942263, "uuid": "6103c4b7-1bfa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.53.250:49939/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744942263, "uuid": "6159ebb1-1bfa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.67.14:56708/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744942444, "uuid": "cd47b1d8-1bfa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.89.25:46364/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744942445, "uuid": "cdbec17e-1bfa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.219.56:34761/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744942565, "uuid": "14f86b57-1bfb-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.60.13:54378/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744942926, "uuid": "ec205bfa-1bfb-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.89.36:57752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744943164, "uuid": "7a70d12e-1bfc-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.101.35:53525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744943289, "uuid": "c4bd423f-1bfc-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.53.16.44:38075/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744943345, "uuid": "e5f775f3-1bfc-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.84.92:37841/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744943651, "uuid": "9cb9d361-1bfd-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.67.14:56708/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744943708, "uuid": "be3eaf55-1bfd-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.7.220:56153/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744943765, "uuid": "e03799da-1bfd-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.happyrace.shop/lc6qmwexnt.aac", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744944006, "uuid": "6fd7e4b0-1bfe-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.219.56:34761/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744944066, "uuid": "93fa8522-1bfe-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.26.147:49821/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744944126, "uuid": "b765be04-1bfe-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.7.220:56153/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744944305, "uuid": "229f85d1-1bff-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.77.89:43743/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744944545, "uuid": "b1287a92-1bff-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.73.12:57717/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744944665, "uuid": "f8a9e4ac-1bff-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.22.242.5:51146/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744944668, "uuid": "fa9a624c-1bff-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.54.228.75:49221/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744944725, "uuid": "1cb63b75-1c00-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.121.167:35467/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945025, "uuid": "cf511edd-1c00-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.26.147:49821/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945145, "uuid": "16b64bd2-1c01-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.141.240:43259/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945206, "uuid": "3b8f355c-1c01-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.106.251:45240/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945443, "uuid": "c8ea89b9-1c01-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.159.96.179:34593/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945444, "uuid": "c93cc774-1c01-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.226.252:48934/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945446, "uuid": "ca409abd-1c01-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.181.164:56938/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945449, "uuid": "cc6a2d6a-1c01-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.236.88:33465/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945473, "uuid": "daadb985-1c01-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.0.143:56098/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945473, "uuid": "daaec841-1c01-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.97:10376/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945473, "uuid": "daaf1eb9-1c01-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.0.78:37000/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945473, "uuid": "daafc010-1c01-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.97.216.188:36636/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945474, "uuid": "db18713b-1c01-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.87.191:42677/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945474, "uuid": "db1b9916-1c01-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.97.216.181:47516/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945474, "uuid": "db213c02-1c01-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.97.136.198:60113/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945474, "uuid": "db370275-1c01-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.48.64.1:49894/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945565, "uuid": "1181afce-1c02-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.42.27:38460/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945684, "uuid": "5875739a-1c02-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.73.255:49896/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945685, "uuid": "58a594d3-1c02-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.172.226:44366/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945703, "uuid": "63c58fdf-1c02-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.65.175:58752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744945882, "uuid": "ce775086-1c02-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.57.143:54746/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744946165, "uuid": "7732be83-1c03-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.89.36:57752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744946165, "uuid": "773e9c76-1c03-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.73.12:57717/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744946226, "uuid": "9b125ea6-1c03-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.22.242.5:51146/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744946286, "uuid": "bed7b577-1c03-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.77.89:43743/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744946345, "uuid": "e21e6fd7-1c03-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.121.167:35467/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744946464, "uuid": "296787f3-1c04-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.235.84:43799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744946706, "uuid": "b925792d-1c04-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.235.84:43799/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744946765, "uuid": "dcdbc46b-1c04-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.132:49101/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744946824, "uuid": "fffb2bb7-1c04-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.141.240:43259/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744946961, "uuid": "51703086-1c05-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.26.102:51121/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744947071, "uuid": "931dda89-1c05-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.244.157:53130/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744947185, "uuid": "d72a5c85-1c05-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.221.27:39666/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744947252, "uuid": "ff0c04f6-1c05-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.201.140.251:35499/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744947365, "uuid": "425164ec-1c06-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.138.36:36889/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744947370, "uuid": "45525a76-1c06-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.happyrace.shop/vg4qeak0q6.aac", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744947492, "uuid": "8e176eb2-1c06-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.66.49:38678/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744947545, "uuid": "adbbecc0-1c06-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.140.26:48093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744947728, "uuid": "1a88e51b-1c07-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.93.42:40405/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744947845, "uuid": "6070910d-1c07-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.244.157:53130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744947994, "uuid": "b90f79a3-1c07-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.23.222:53320/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744948207, "uuid": "37d39422-1c08-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.117.82:45851/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744948264, "uuid": "5a1851fc-1c08-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.221.27:39666/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744948385, "uuid": "a2023422-1c08-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.135.17.58:57083/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744948386, "uuid": "a29ae138-1c08-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.214.101.180:35193/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744948445, "uuid": "c60b16f2-1c08-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.97.124:42740/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744948985, "uuid": "07bada8a-1c0a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.138.36:36889/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744949045, "uuid": "2bd413f0-1c0a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.150.34:58308/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744949225, "uuid": "971d5c8b-1c0a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.93.42:40405/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744949344, "uuid": "ddf0aebb-1c0a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.199.220:39649/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744949585, "uuid": "6d825b97-1c0b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.214.101.180:35193/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744949768, "uuid": "da4e05f7-1c0b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.117.82:45851/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744949827, "uuid": "fd6dd0cc-1c0b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.80.56:58321/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744949885, "uuid": "20091cd3-1c0c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.23.222:53320/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950366, "uuid": "3f380b92-1c0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.138.253:50519/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950425, "uuid": "624daf7d-1c0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.123.147:58015/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950426, "uuid": "62f9b23e-1c0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.135.246:40414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950666, "uuid": "f1805094-1c0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.60.208:48134/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950726, "uuid": "155027c2-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.97.124:42740/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950786, "uuid": "3990ed34-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.23.118:52913/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950904, "uuid": "7fef61e7-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.81.23.54/bin//support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950905, "uuid": "7ff463e5-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.81.23.58/bin//support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950905, "uuid": "800c407e-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.81.23.14/bin//support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950905, "uuid": "800ca62d-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.81.23.57/bin//support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950905, "uuid": "80276a19-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.81.23.56/bin//support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950906, "uuid": "808bd832-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/bins.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950906, "uuid": "80a6bfed-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.233.48.64/Downloads/Commercial_Proposal_Request", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950906, "uuid": "80bc272c-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.66.49:38678/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950908, "uuid": "822f7e42-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://qqcxq.dyheg.fun/7721972eb8e100d6923d14a4173e8f144785818bbaeca7b9.accdt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950927, "uuid": "8d41f15a-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://h1.wildlifeautograph.shop/shark.bin", "Tag": [ { "name": "dropped-by-LummaStealer", "colour": "#f7b3b5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950928, "uuid": "8dde8c0b-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://adminisgty7.rest/EVEGBPOK.msi", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950930, "uuid": "8ee33143-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.233.48.64/Downloads/PuGe.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950931, "uuid": "8f895a1f-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://medoloki9.shop/YZTIBVYC.msi", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950989, "uuid": "b275cea6-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.150.34:58308/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744950990, "uuid": "b316dee5-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.happyrace.shop/ur2b3pelaj.aac", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951052, "uuid": "d82417d8-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.4.241:55685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951083, "uuid": "ea490018-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.241.175/most-ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951083, "uuid": "ea4a6dc1-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.241.175/most-spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951084, "uuid": "eb037507-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.241.175/most-arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "eb6d59d6-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.241.175/most-mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "eb710406-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.241.175/most-x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "eb710432-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.241.175/most-m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "eb710c70-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.241.175/most-arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "eb721099-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.241.175/most-mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "eb7212f1-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.241.175/most-sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "eb780cdc-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.241.175/most-arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "eb7a0e53-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.241.175/most-arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951085, "uuid": "eb7a1104-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.241.175/most-x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951113, "uuid": "fc3cfdab-1c0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.96.208:60724/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951324, "uuid": "7a3c2945-1c0f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.38.106.89:42698/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951325, "uuid": "7abd5557-1c0f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.225.162:40953/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951504, "uuid": "e58f0ad5-1c0f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.80.56:58321/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951704, "uuid": "5cc0d4fd-1c10-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.174.53:51168/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951743, "uuid": "73a528b5-1c10-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.132.101.120/xampp/fbv/verynicepeoplesaroundonhereforgetlovermehere.gif", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951744, "uuid": "746f3e3b-1c10-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.190.111:55297/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951748, "uuid": "76693842-1c10-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.131.156:44443/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951748, "uuid": "769c02c4-1c10-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.132.101.120/xampp/fbv/verynicepeoplesaroundonhereforgetlovermehere.txt", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951806, "uuid": "99338fa6-1c10-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.208.13/wex/mghcc.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951823, "uuid": "a35296bf-1c10-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.140.184:34717/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951925, "uuid": "e0659aff-1c10-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.138.253:50519/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744951984, "uuid": "03a3669f-1c11-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.136.155:45321/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744952513, "uuid": "3ebca7f6-1c12-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.172.70:44445/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744952644, "uuid": "8cf515b8-1c12-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.171.255.153:35927/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744952646, "uuid": "8df87a30-1c12-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://aguout12.lovestoblog.com/arquivo_e822205c4c014d7495a1d7b07ce1513c.txt", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744952649, "uuid": "8f7c4b63-1c12-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://aguout12.lovestoblog.com/arquivo_e3e7e428efd74f25b48d3efd891a5391.txt", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744952663, "uuid": "97efcb14-1c12-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.25.8:32770/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744952713, "uuid": "b5bdea9e-1c12-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://bdnews25.com/wp-includes/assets/converted.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744952764, "uuid": "d4376b53-1c12-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.38.106.89:42698/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744952832, "uuid": "fc9eeec9-1c12-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.96.208:60724/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744952961, "uuid": "49d7f653-1c13-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.100.76:48639/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953069, "uuid": "89cbfec0-1c13-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.174.53:51168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953245, "uuid": "f2c0215e-1c13-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.190.111:55297/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953245, "uuid": "f30f3b4f-1c13-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.140.184:34717/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953245, "uuid": "f31a81fb-1c13-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.135.17.58:57083/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953303, "uuid": "15af2385-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.95.196.49/a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953303, "uuid": "15aff2b7-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.95.196.49/most-arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "3904d9d0-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.143.24/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "390888ac-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.69.157/cron", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "39089db1-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.69.157/wget", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "3908a002-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.69.157/apache2", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "3908a1b4-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.69.157/sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "3908a3f0-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.69.157/ftp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "39090cc5-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.69.157/nut", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "390c622d-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.69.157/sshd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "390dd77f-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.69.157/pftp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "390e04c1-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.69.157/bash", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "390ea2d9-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.69.157/telnetd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "3916cb4a-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.69.157/openssh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "39245cd4-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.95.196.49/most-x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "3925f248-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.95.196.49/most-spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "39270d0e-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.95.196.49/most-arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "3927d258-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/yougay", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "393ac2c4-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.95.196.49/most-arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "393c1ae7-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.95.196.49/most-x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "393c4bb4-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.95.196.49/most-mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "393c8000-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.95.196.49/most-arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "393d1420-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.95.196.49/most-mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "393d5d5a-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.95.196.49/most-ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "393d9d44-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.95.196.49/most-sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "39429ae8-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.48.207/hiddenbin/boatnet.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "394353d9-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.48.207/hiddenbin/boatnet.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "394ba588-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.48.207/hiddenbin/boatnet.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953363, "uuid": "396215ae-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.69.157/ntpd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953364, "uuid": "39b0521f-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.95.196.49/most-m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953365, "uuid": "3ab857ae-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.241.175/a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953365, "uuid": "3ac8715e-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.43.60:48457/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "3b1e9e3e-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/botnet", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "3b30fb64-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/swatnet", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "3b377419-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/ballnet", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "3b382265-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/fucknet", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "3b40d291-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/weednet", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "3b42adbb-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/cracknet", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "3b4759f4-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/dicknet", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "3b4efd1e-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/gaynet", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "3b508c66-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/net", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "3b5614ac-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/unet", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "3b5b95ac-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/queernet", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953366, "uuid": "3b66008a-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/cock", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953393, "uuid": "4af6cfb3-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.215.108.183/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953393, "uuid": "4af85529-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.136.43.20/k6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953393, "uuid": "4b2fb213-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.215.108.183/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953428, "uuid": "60105baf-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.95.147:53100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953545, "uuid": "a6109601-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.25.8:32770/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953546, "uuid": "a654d2c4-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.vysub.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953665, "uuid": "ed0dd63c-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.136.155:45321/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953666, "uuid": "edddb863-1c14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.172.7.56:37358/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953784, "uuid": "33f690f1-1c15-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.36.148.87:48333/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953845, "uuid": "58d5282f-1c15-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.147.144:33247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953906, "uuid": "7ce09d92-1c15-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.100.76:48639/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744953906, "uuid": "7ce7d3e9-1c15-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.172.70:44445/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744954088, "uuid": "e931e515-1c15-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.219.49.173:4089/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744954384, "uuid": "99f1a085-1c16-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.212.73:51842/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744954623, "uuid": "2890550e-1c17-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.happyrace.shop/d42bkqfbi5.aac", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744954633, "uuid": "2e744c8d-1c17-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.30.103:60244/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744955043, "uuid": "22f6ed4b-1c18-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.36.148.87:48333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744955105, "uuid": "47ea5af7-1c18-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.73.108:56350/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744955166, "uuid": "6bd917de-1c18-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.30.103:60244/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744955226, "uuid": "8f741274-1c18-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.147.144:33247/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744955228, "uuid": "910fa6fe-1c18-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.10.141.85:56740/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744955466, "uuid": "1e8b8485-1c19-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.123.210:36307/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744955524, "uuid": "41717c6a-1c19-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.6.83.99:33799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744955525, "uuid": "41bb9b74-1c19-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.176:55534/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744955603, "uuid": "702d1878-1c19-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.248.22:59326/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744955645, "uuid": "89c48fa9-1c19-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.172.7.56:37358/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744955768, "uuid": "d28f80b2-1c19-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.177.109.165:57215/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744955825, "uuid": "f4be6dd6-1c19-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.39.163:57116/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744955885, "uuid": "188bb0d0-1c1a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.149.217:50905/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744956007, "uuid": "61738aae-1c1a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.32.2.36:44206/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744956064, "uuid": "8352d420-1c1a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.6.83.99:33799/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744956065, "uuid": "84156702-1c1a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.1.5:34998/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744956126, "uuid": "a837ab47-1c1a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.85.147:49484/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744956185, "uuid": "cba1b700-1c1a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.133.158:37607/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744956212, "uuid": "db9d6511-1c1a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.186:11866/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744956213, "uuid": "dbc1fd86-1c1a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.118.246.210:42369/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744956213, "uuid": "dbd481b9-1c1a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.178.112.52:59742/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744956213, "uuid": "dc0487b9-1c1a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.80.10.156:58748/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744956246, "uuid": "efb21439-1c1a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.216.209:54412/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744956247, "uuid": "f072d36d-1c1a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.177.242.29:34486/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744956274, "uuid": "005472bc-1c1b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.97.138.199:48042/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744956274, "uuid": "00570baa-1c1b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.97.214.197:46811/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744956274, "uuid": "0058167d-1c1b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.194.13.148:44140/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744956277, "uuid": "026e2760-1c1b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.251.219:59918/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744956278, "uuid": "02a2506f-1c1b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.210.101.132:33294/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744956605, "uuid": "c5c8d975-1c1b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.1.5:34998/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744956724, "uuid": "0c80f9db-1c1c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.93.3:36144/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744956847, "uuid": "55d0c9d3-1c1c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.33.201:53336/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744957026, "uuid": "c05dca82-1c1c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.92.240.172:43662/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744957042, "uuid": "ca0c456f-1c1c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.248.22:59326/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744957144, "uuid": "06f12f5e-1c1d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.30.69:39949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744957145, "uuid": "076ee144-1c1d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.250.10:40402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744957145, "uuid": "0793e691-1c1d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.112.195:35593/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744957206, "uuid": "2bfcca54-1c1d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.251.209:35736/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744957207, "uuid": "2cabb6f1-1c1d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.10.141.85:56740/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744957264, "uuid": "4eacf7c3-1c1d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.20.165:45709/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744957445, "uuid": "ba2a3ac5-1c1d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.149.217:50905/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744957566, "uuid": "02342f84-1c1e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.177.109.165:57215/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744957566, "uuid": "0242cb32-1c1e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.32.2.36:44206/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744957566, "uuid": "025133c7-1c1e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.220.4:37805/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744957626, "uuid": "264cb626-1c1e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.31.180.128:39007/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744957626, "uuid": "2683a1fd-1c1e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.251.209:35736/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744957806, "uuid": "914925a7-1c1e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.39.163:57116/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744957926, "uuid": "d8cfdb8a-1c1e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.123.210:36307/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744958106, "uuid": "447bf3a1-1c1f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.33.201:53336/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744958225, "uuid": "8b27ded2-1c1f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.happyrace.shop/o1tzqjypxg.aac", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744958225, "uuid": "8b91cf5c-1c1f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.104.209:36586/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744958226, "uuid": "8bff9936-1c1f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.41.245:36154/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744958524, "uuid": "3d3fc551-1c20-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.250.10:40402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744958524, "uuid": "3d800cdd-1c20-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.183.217:44055/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744958588, "uuid": "63e4131f-1c20-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.46.86.56:48439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744958644, "uuid": "854c0236-1c20-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.223.218:37771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744958704, "uuid": "a9115419-1c20-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.20.165:45709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744958765, "uuid": "ccff42fb-1c20-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.92.240.172:43662/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744958765, "uuid": "cd59ddc3-1c20-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.92.225:57967/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744958782, "uuid": "d796898f-1c20-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.50.222:54168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744958944, "uuid": "37eebefb-1c21-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.220.4:37805/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959006, "uuid": "5cb2fc0f-1c21-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.247.237:60834/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959006, "uuid": "5d0ce9e4-1c21-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.132.95.187:44246/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959126, "uuid": "a44a7379-1c21-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.24.152:58917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959543, "uuid": "9d0b62aa-1c22-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.85.147:49484/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959605, "uuid": "c1ad9e23-1c22-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/vinhuptoday/testbn/blob/main/brbotnet.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959605, "uuid": "c1e2883f-1c22-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/vinhuptoday/testbn/blob/main/BrBN.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959605, "uuid": "c214e3a8-1c22-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/vinhuptoday/testbn/blob/main/main-win.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959606, "uuid": "c2ba92ea-1c22-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://travelrevert.org/bat/encode/rose_tien_en.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959666, "uuid": "e5f9133b-1c22-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.41.245:36154/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959667, "uuid": "e6efd7de-1c22-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/vinhuptoday/testbn/raw/refs/heads/main/brbotnet.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959669, "uuid": "e7d399fb-1c22-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/vinhuptoday/testbn/blob/main/main.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959725, "uuid": "099c9d5e-1c23-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.76.59:57587/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959921, "uuid": "7e0468ed-1c23-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.24.152:58917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959964, "uuid": "9813bc9a-1c23-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.103.191:37925/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744959969, "uuid": "9a87cebc-1c23-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.174.135:57216/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960145, "uuid": "03aef641-1c24-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.112.97:37150/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960207, "uuid": "28bc8f79-1c24-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.46.86.56:48439/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960506, "uuid": "db173c6c-1c24-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.140.80/bins/sora.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960506, "uuid": "db219445-1c24-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.140.80/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960506, "uuid": "db24308c-1c24-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.140.80/bins/sora.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960506, "uuid": "db27dada-1c24-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.140.80/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960506, "uuid": "db27dad7-1c24-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.140.80/bins/sora.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960507, "uuid": "db372b77-1c24-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.140.80/bins/sora.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960507, "uuid": "db48e210-1c24-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.140.80/bins/sora.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960507, "uuid": "db72d31c-1c24-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.34.234:48964/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960507, "uuid": "db9bb0fb-1c24-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.140.80/bins/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960507, "uuid": "db9d4e83-1c24-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.140.80/bins/sora.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960565, "uuid": "fe004016-1c24-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.140.80/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960566, "uuid": "fe89fd66-1c24-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.140.80/bins/sora.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960625, "uuid": "21bf64dd-1c25-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.140.80/bins/sora.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744960685, "uuid": "45960cdb-1c25-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.140.80/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744961106, "uuid": "407460a2-1c26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.78.50:60494/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744961165, "uuid": "63a94004-1c26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.60.208:48134/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744961286, "uuid": "ab842e74-1c26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.89.15:56307/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744961348, "uuid": "d07e501c-1c26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.132.128.208:36713/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744961408, "uuid": "f44f8aab-1c26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.22.236:59200/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744961466, "uuid": "16f0b52f-1c27-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.247.237:60834/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744961467, "uuid": "17942ea3-1c27-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.96/hanoi.x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744961585, "uuid": "5dcfb825-1c27-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.219.1.198:49378/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744961765, "uuid": "c96dd48b-1c27-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.104.209:36586/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744961825, "uuid": "ecd20beb-1c27-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.223.218:37771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744961827, "uuid": "edfd3d8e-1c27-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.happyrace.shop/ln5cy5t65e.aac", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744961852, "uuid": "fce7bd33-1c27-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.178.88:59910/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744961885, "uuid": "11042145-1c28-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.112.97:37150/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744962064, "uuid": "7b8aac01-1c28-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.15.60.203:33039/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744962066, "uuid": "7ce2d01c-1c28-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.27.187:58824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744962125, "uuid": "9fa9a4b4-1c28-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.34.234:48964/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744962245, "uuid": "e7ac00a0-1c28-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.24.141:56568/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744962366, "uuid": "2f7991b6-1c29-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.78.50:60494/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744962505, "uuid": "8246397a-1c29-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.183.149:41881/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744962545, "uuid": "9a42d32d-1c29-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.175.183:33276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744962743, "uuid": "1057fcfb-1c2a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.238.180.151:59961/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744962861, "uuid": "567055f7-1c2a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.249.11:34233/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744962965, "uuid": "94d93329-1c2a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.93.156:51742/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744962966, "uuid": "94e59e88-1c2a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.22.236:59200/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744963025, "uuid": "b8253449-1c2a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.74.98:50517/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744963026, "uuid": "b8ad6009-1c2a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.34.222:60785/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744963083, "uuid": "db0ed06f-1c2a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.becyz.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744963205, "uuid": "23db9a9b-1c2b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.241.128:50085/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744963512, "uuid": "daa079b3-1c2b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.183.149:41881/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744963565, "uuid": "f9ecda7c-1c2b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.163.43:57128/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744963565, "uuid": "fa22eecc-1c2b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.227.118:39503/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744963697, "uuid": "48cff852-1c2c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.238.180.151:59961/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744963823, "uuid": "93e827e5-1c2c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.18.87:56293/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744964046, "uuid": "189e107e-1c2d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.155.207.75:45311/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744964046, "uuid": "18ad278f-1c2d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.98.167.124:45287/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744964107, "uuid": "3d44dacc-1c2d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.249.11:34233/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744964286, "uuid": "a7a2d8eb-1c2d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.94.154.190:46259/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744964465, "uuid": "12624455-1c2e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.74.98:50517/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744964584, "uuid": "59c746aa-1c2e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.34.222:60785/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744964584, "uuid": "59cc233c-1c2e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.241.128:50085/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744964706, "uuid": "a206679f-1c2e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.98.167.124:45287/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744964706, "uuid": "a28fd7ff-1c2e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.44.98.181:39810/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744964766, "uuid": "c5f8a647-1c2e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.227.118:39503/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744965020, "uuid": "5d3ff1ad-1c2f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.248.119:44192/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744965065, "uuid": "78790ffb-1c2f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.81:37575/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744965066, "uuid": "790a3d0f-1c2f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.4.218:49877/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744965124, "uuid": "9bb01780-1c2f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.230.57:34461/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744965423, "uuid": "4d86ad60-1c30-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.happyrace.shop/hniwlhmz6x.aac", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744965544, "uuid": "9609ae7f-1c30-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.39.17:34955/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744965562, "uuid": "a0a0fb92-1c30-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.96.176:46688/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744965606, "uuid": "ba7f5e37-1c30-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.8.191:60390/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744965664, "uuid": "dd605afb-1c30-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.187.82:56512/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744965754, "uuid": "12a74af1-1c31-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.71.58:44513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744965785, "uuid": "2565cccd-1c31-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.44.98.181:39810/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744965965, "uuid": "90c1a84c-1c31-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.94.154.190:46259/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744966206, "uuid": "201b2873-1c32-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.173.101:39265/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744966353, "uuid": "782cd64d-1c32-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.52:42035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744966385, "uuid": "8b4c16dd-1c32-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.149.215:51534/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744966444, "uuid": "ae7272c5-1c32-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.175.183:33276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744966506, "uuid": "d2e746c4-1c32-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.248.119:44192/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744966506, "uuid": "d2ef308a-1c32-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.184.173:36009/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744966624, "uuid": "19819e5f-1c33-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.81:37575/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744966625, "uuid": "1a56b4ac-1c33-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.87.204:60570/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744966746, "uuid": "6224996e-1c33-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.230.57:34461/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744967017, "uuid": "03ec7626-1c34-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.5.11.247:40344/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744967045, "uuid": "14505bbb-1c34-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.119.220:49841/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744967045, "uuid": "1490a863-1c34-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.51.150.157:40165/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744967045, "uuid": "149c206d-1c34-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.233.58.217:49275/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744967065, "uuid": "2074c6e0-1c34-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.60.198:34520/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744967073, "uuid": "24dd695b-1c34-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.93.107.1:39993/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744967073, "uuid": "2548eea9-1c34-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.97.138.180:38612/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744967073, "uuid": "255060df-1c34-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.231.75:33731/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744967080, "uuid": "29530ea0-1c34-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.173.211.183:57321/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744967225, "uuid": "7fabcc45-1c34-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.241.136.65:38753/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744967464, "uuid": "0e527014-1c35-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.213.25:40208/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744967493, "uuid": "1f351ed6-1c35-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.187.82:56512/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744967586, "uuid": "56bd67c6-1c35-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.174.91.221:51567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744967824, "uuid": "e4dbbe80-1c35-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.149.215:51534/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744968188, "uuid": "bd849d02-1c36-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.87.204:60570/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744968306, "uuid": "03bf0afd-1c37-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.87.187:51170/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744968365, "uuid": "2764ae66-1c37-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.56.100:50140/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744968426, "uuid": "4b88ae7d-1c37-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.233.58.217:49275/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744968606, "uuid": "b6d7bcb9-1c37-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.196.147:41556/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744968844, "uuid": "44bfc212-1c38-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.213.25:40208/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744969024, "uuid": "b03b9545-1c38-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.224.225:58917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744969031, "uuid": "b3e36f12-1c38-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.happyrace.shop/kuihoh85vy.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744969145, "uuid": "f81d1779-1c38-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.74.24:36514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744969207, "uuid": "1cc83621-1c39-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.173.101:39265/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744969266, "uuid": "3ffd82d2-1c39-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.60.163:57308/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744969325, "uuid": "63a82095-1c39-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.88.55:44921/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744969805, "uuid": "818b5b91-1c3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.196.147:41556/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744969805, "uuid": "81c25485-1c3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.87.187:51170/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744969808, "uuid": "8313ddfd-1c3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.203.252.62:50373/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744969867, "uuid": "a669be0d-1c3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.227.163:60041/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744969985, "uuid": "ec8b672b-1c3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.174.91.221:51567/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744970044, "uuid": "0ff63369-1c3b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.30.69:39949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744970106, "uuid": "34ae3c1e-1c3b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.74.24:36514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744970285, "uuid": "9f681e96-1c3b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.96.176:46688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744970346, "uuid": "c3c1f05d-1c3b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.147.103.152:47415/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744970406, "uuid": "e78c002b-1c3b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.195.247:49682/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744970492, "uuid": "1b1382c7-1c3c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.225.160.253:33176/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744970526, "uuid": "2efb37ad-1c3c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.60.163:57308/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744970646, "uuid": "769daafb-1c3c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.22.139:55372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744970766, "uuid": "be6e61f8-1c3c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.88.55:44921/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744970889, "uuid": "075bbca9-1c3d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.187.108:60856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744970889, "uuid": "075d0af9-1c3d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.241.136.65:38753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744970945, "uuid": "2906f456-1c3d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.87.92:40855/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744970974, "uuid": "3a1fab2d-1c3d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.27.105:49362/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744971006, "uuid": "4d4f3810-1c3d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.227.163:60041/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744971363, "uuid": "225525bb-1c3e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.kubab.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744971365, "uuid": "23827778-1c3e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.233.209:45931/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744971486, "uuid": "6b95b6f3-1c3e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.251.203:42916/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744971544, "uuid": "8e27aff6-1c3e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.206.12.18:43909/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744971545, "uuid": "8e9d8361-1c3e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.23.118:52913/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744971665, "uuid": "d6128b5f-1c3e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.22.139:55372/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744971906, "uuid": "65fc16c7-1c3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.147.103.152:47415/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744972040, "uuid": "b5a7bf68-1c3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.160.176:55737/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744972145, "uuid": "f4689534-1c3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.18.190:45954/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744972207, "uuid": "193da24f-1c40-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.9.154.121:59631/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744972326, "uuid": "603d8d9c-1c40-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.27.105:49362/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744972630, "uuid": "15319d1a-1c41-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.cherubaviation.life/gum1gu191t.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744972824, "uuid": "88f85782-1c41-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.55.185:50215/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744972925, "uuid": "c510550b-1c41-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.206.12.18:43909/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744972985, "uuid": "e8b89c35-1c41-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.233.209:45931/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744973345, "uuid": "bfae399c-1c42-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.9.155:51190/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744973406, "uuid": "e3e7ef54-1c42-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.18.190:45954/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744973885, "uuid": "0126645f-1c44-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.208.243:42160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744974007, "uuid": "4a5fff2e-1c44-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.151.199:57587/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744974065, "uuid": "6cdd7a59-1c44-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.9.154.121:59631/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744974125, "uuid": "9041e825-1c44-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.234.179:54156/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744974245, "uuid": "d7f9b655-1c44-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.87.92:40855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744974308, "uuid": "fd492daa-1c44-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.239.170:53971/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744974308, "uuid": "fdbb8a7f-1c44-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.83.63:35525/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744974370, "uuid": "22432b15-1c45-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.45.11:36665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744974906, "uuid": "61f0d737-1c46-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.145.170:59597/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744975025, "uuid": "a8eb7e68-1c46-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.28.45:43622/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744975085, "uuid": "cc6939fe-1c46-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.92.225:57967/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744975265, "uuid": "38276dc5-1c47-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.45.11:36665/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744975325, "uuid": "5bda6858-1c47-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.208.243:42160/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744975327, "uuid": "5cdfea00-1c47-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.220.179:35703/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744975446, "uuid": "a3f1ecaf-1c47-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.95.48:36169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744975565, "uuid": "ead9c8b2-1c47-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.235:57042/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744975806, "uuid": "7a896284-1c48-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.187.71:37771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744975807, "uuid": "7ac4c989-1c48-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.74.70:44055/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744975926, "uuid": "c1be01e2-1c48-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.120.21:38904/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744976044, "uuid": "085995b3-1c49-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.159.131.11/skid.mips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744976045, "uuid": "08c0bd7d-1c49-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.28.45:43622/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744976103, "uuid": "2b8abd14-1c49-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.159.131.11/skid.armv4l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744976104, "uuid": "2bd5c668-1c49-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.159.131.11/skid.armv5l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744976104, "uuid": "2c43f910-1c49-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.159.131.11/massload", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744976164, "uuid": "4f921e2e-1c49-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.159.131.11/skid.mipsel", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744976164, "uuid": "4f922054-1c49-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.159.131.11/skid.armv7l", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744976245, "uuid": "7ffe9c6e-1c49-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.cherubaviation.life/08s3qhilyt.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744976285, "uuid": "98146410-1c49-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.128.132.103:54954/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744976346, "uuid": "bc06c0cb-1c49-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.175.249:52285/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744976586, "uuid": "4b33e5ea-1c4a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.168.155.140:50636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744976765, "uuid": "b5bf53f9-1c4a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.220.179:35703/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744976765, "uuid": "b609b3db-1c4a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.69.58.248:54127/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744976946, "uuid": "21a478c8-1c4b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.234.30:42050/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977243, "uuid": "d30f756e-1c4b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/abarekl1/i/blob/main/Newfile.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977243, "uuid": "d3257bd8-1c4b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://repoupdater.ddns.net/admin.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977245, "uuid": "d3f94250-1c4b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://repoupdater.ddns.net/ozS3jlAM9V/windowsOutside.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977246, "uuid": "d4c58b90-1c4b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://repoupdater.ddns.net/ozS3jlAM9V/windowsDefenderAnalyst.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977248, "uuid": "d59c1b93-1c4b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.129.6:38057/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977249, "uuid": "d67e0fb7-1c4b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.dropbox.com/scl/fi/fpjvgs48ibkv7jujnyt09/CV-Quiroga-Luciana.vbs?rlkey=gba4zghqe1dii920v2orupu6a&st=by84lq86&dl=1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977252, "uuid": "d87b283b-1c4b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/abarekl1/dcm/main/Document.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977253, "uuid": "d91d29b1-1c4b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/7yxi0f.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977255, "uuid": "d9d852fa-1c4b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/abarekl1/dcm/raw/main/Document.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977255, "uuid": "d9f680f8-1c4b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/abarekl1/dcm/blob/main/Document.zip?raw=true", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977365, "uuid": "1b5d93cf-1c4c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.0.255:56711/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977366, "uuid": "1c5e6f78-1c4c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.54.228.75:49221/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977426, "uuid": "3ff73a16-1c4c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.25.235.199:50073/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977485, "uuid": "635d3ea4-1c4c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.235:57042/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977545, "uuid": "86d3655d-1c4c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.50.6:45722/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977784, "uuid": "153165aa-1c4d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.33.46.36:46231/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977784, "uuid": "153165ba-1c4d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.159.96.179:34672/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977787, "uuid": "16ef119e-1c4d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.218.104.247:58987/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977789, "uuid": "1810749d-1c4d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.211.241:35051/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977789, "uuid": "1810767c-1c4d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.9.86:40446/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977790, "uuid": "18b45b81-1c4d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.233.209:37756/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977792, "uuid": "1a36b9c4-1c4d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.207.125.60:60720/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977792, "uuid": "1a57cf10-1c4d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.207.125.40:46518/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977814, "uuid": "2739250a-1c4d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.206.102.139:57560/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977814, "uuid": "27654631-1c4d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.97.138.240:37507/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977906, "uuid": "5dd1a78b-1c4d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.50.145:48905/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744977964, "uuid": "80e3afb1-1c4d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.128.132.103:54954/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744978277, "uuid": "3b766b02-1c4e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.79.46:45160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744978384, "uuid": "7b14dc3b-1c4e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.50.6:45722/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744978446, "uuid": "a018ea23-1c4e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.45.132.99:56118/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744978745, "uuid": "51eab9f5-1c4f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.129.6:38057/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744978745, "uuid": "52385e93-1c4f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.3.94:56367/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744978806, "uuid": "76c82c28-1c4f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.25.235.199:50073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744978925, "uuid": "bdb85732-1c4f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.39.193:57288/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744979166, "uuid": "4d1e7d13-1c50-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.235.231:52467/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744979526, "uuid": "2399d2ec-1c51-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.121.73.158:56569/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744979673, "uuid": "7b8221f2-1c51-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.149.25:35445/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744979705, "uuid": "8e93bfc0-1c51-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.163.60:49588/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744979824, "uuid": "d58723a2-1c51-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.141.86:43323/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744979829, "uuid": "d83586d8-1c51-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.cherubaviation.life/xhxguf1sro.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744979945, "uuid": "1d7ea781-1c52-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.45.132.99:56118/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744980125, "uuid": "886c1ebb-1c52-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.39.193:57288/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744980186, "uuid": "ad16452d-1c52-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.89.112:55517/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744980244, "uuid": "cfe6a5f7-1c52-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.195.247:49682/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744980245, "uuid": "d01d6de9-1c52-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.235.231:52467/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744980770, "uuid": "090a201e-1c54-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.18.70:43531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744980786, "uuid": "1266b305-1c54-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.247.92.220:35654/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744980905, "uuid": "59b7a306-1c54-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.91.236:48062/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744980906, "uuid": "5a733de1-1c54-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.228.102.155:36808/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744980965, "uuid": "7d3d4b38-1c54-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.163.60:49588/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981326, "uuid": "546bb23c-1c55-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.222.18:56362/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981326, "uuid": "54ca68b5-1c55-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.101.249.185:37151/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981386, "uuid": "7831f733-1c55-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.255.42.150:39896/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981505, "uuid": "bf61b1a0-1c55-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.141.86:43323/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981688, "uuid": "2c682be6-1c56-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.128.59:54358/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981745, "uuid": "4e1ef425-1c56-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.238.18:36558/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981747, "uuid": "4f552912-1c56-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.132.221:40248/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981925, "uuid": "b9b1c915-1c56-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.246.249:57274/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744981932, "uuid": "bdd5136f-1c56-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.18.70:43531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982046, "uuid": "01af2bb3-1c57-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.228.102.155:36808/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982048, "uuid": "03324474-1c57-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.247.92.220:35654/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982404, "uuid": "d75cdbfa-1c57-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.faneg.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982466, "uuid": "fbe348da-1c57-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.218.30:41723/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744982767, "uuid": "af736d3a-1c58-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.101.249.185:37151/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983067, "uuid": "6260bc25-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/u", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983071, "uuid": "64c0173e-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.224.225:58917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "652a400b-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/r", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "652b382f-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/vv/armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "65334298-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/f", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "653c5f76-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/c", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "654f6a49-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/tt/mipsel64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "655761d2-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/tt/armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "655bd4aa-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/k", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "655c0dc0-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/e", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "655f9957-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/s", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "65784132-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/vv/mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983072, "uuid": "65788c4b-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/tt/armv4eb", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "659785cb-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/vv/armv4eb", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "65983907-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/ee/armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "65984841-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/ee/armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "65b1488d-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/tt/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "65b1bc02-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/vv/armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "65b243e4-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/vv/armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "65bc32f5-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/tt/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "65bcdb1e-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/vv/powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "65be2972-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/tt/armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "65be889d-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/ee/armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "65c08c91-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/vv/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "65c1342f-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/ee/armv4eb", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "65cdac61-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/vv/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "65cfde31-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/tt/armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "65d10955-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/tt/riscv32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "65d7ef19-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/tt/sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "65e7361a-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/t", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "65f52357-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/tt/powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "65f54a1d-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/vv/riscv32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "66013ec4-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/vv/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "66031c68-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/tt/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "66033d98-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/tt/mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "660371da-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/ee/armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983073, "uuid": "66165c66-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/vv/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983074, "uuid": "66373b5c-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/vv/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983074, "uuid": "663c7d06-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/tt/armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983074, "uuid": "66405403-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/tt/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983074, "uuid": "664082e0-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/vv/armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983074, "uuid": "6676d4c7-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/n", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983075, "uuid": "66cfdf1d-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/m", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983075, "uuid": "6720aeeb-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/vv/sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983075, "uuid": "672af338-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/tt/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983087, "uuid": "6e52082e-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/v", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983124, "uuid": "846b6f87-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.45/l", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983186, "uuid": "a93e267a-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.128.59:54358/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983190, "uuid": "aba87df0-1c59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.81.73.236:58498/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983366, "uuid": "1454b942-1c5a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.238.18:36558/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983394, "uuid": "251d2b29-1c5a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://98.128.175.145/tarragon2", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983426, "uuid": "38826ac8-1c5a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.cherubaviation.life/gngigh8v64.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983427, "uuid": "38d0f459-1c5a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.246.249:57274/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983497, "uuid": "6270557e-1c5a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.166.207:53688/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983605, "uuid": "a3217b4a-1c5a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.218.30:41723/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744983726, "uuid": "eadb0d56-1c5a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.220.112:55648/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744984085, "uuid": "c15981aa-1c5b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.249.217:45136/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744984205, "uuid": "08c54b54-1c5c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.220.112:55648/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744984325, "uuid": "5033f84d-1c5c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.212.157:38159/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744984326, "uuid": "50903461-1c5c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.107.150.232:5348/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744984565, "uuid": "dee9858e-1c5c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.253.183:44314/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744984565, "uuid": "df54b6bd-1c5c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.249.217:45136/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744984744, "uuid": "4a10f57e-1c5d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.152.252:59545/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744984985, "uuid": "d99971b1-1c5d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.107.150.232:5348/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744985225, "uuid": "68476e8b-1c5e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.132.221:40248/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744985466, "uuid": "f819bc2e-1c5e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.180.137.251:43659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744985645, "uuid": "62bff37c-1c5f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.117.234:54220/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744985944, "uuid": "150f6402-1c60-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.253.183:44314/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744986246, "uuid": "c9488a7d-1c60-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.119.199:42344/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744986364, "uuid": "0f3fee71-1c61-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.238.0.54:41123/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744986425, "uuid": "33a0deb4-1c61-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.57.125.75:41849/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744986666, "uuid": "c3666455-1c61-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.215.191.44:48492/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744986801, "uuid": "13d3d1ce-1c62-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.235.49:34976/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744987046, "uuid": "a5c2b5f0-1c62-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.happyrace.shop/31icgvouus.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744987384, "uuid": "6f6c1f77-1c63-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.119.199:42344/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744987446, "uuid": "94177ae8-1c63-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.238.0.54:41123/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744987446, "uuid": "9422ef6b-1c63-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.117.234:54220/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744987506, "uuid": "b80346cf-1c63-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.130.247.177:54973/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744987686, "uuid": "2339429a-1c64-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.35.181:58268/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744987692, "uuid": "26ddc33b-1c64-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.57.125.75:41849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744987925, "uuid": "b1aa138d-1c64-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.235.49:34976/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744987985, "uuid": "d59d77ed-1c64-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.36.18:46964/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744988045, "uuid": "f9abb509-1c64-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.4.218:49877/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744988591, "uuid": "3ec63eae-1c66-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.252.9:49938/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744988613, "uuid": "4c380d81-1c66-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.217.43.200:40448/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744988613, "uuid": "4c390714-1c66-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.153:10991/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744988613, "uuid": "4c390bf2-1c66-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.207.125.57:56866/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744988613, "uuid": "4c3a8697-1c66-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.0.6:42067/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744988614, "uuid": "4c871652-1c66-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.97.136.232:41709/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744988705, "uuid": "82fd6986-1c66-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.24.39:40458/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744988824, "uuid": "c9edb907-1c66-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.71.252:35123/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744989005, "uuid": "35e648a4-1c67-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.123.196:54011/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744989305, "uuid": "e86c5269-1c67-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.174:53557/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744989366, "uuid": "0c7b5a35-1c68-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.35.181:58268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744989845, "uuid": "29fef447-1c69-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.211.24:39108/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990085, "uuid": "b99300ba-1c69-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.88.87.187/Sakura.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "b9d2b5aa-1c69-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.88.87.187/x86.Sakura", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "b9f77703-1c69-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.88.87.187/x32.Sakura", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "b9fe72df-1c69-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.88.87.187/ppc.Sakura", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "ba096620-1c69-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.88.87.187/arm7.Sakura", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "ba123fdd-1c69-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.88.87.187/sh4.Sakura", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "ba13b2a2-1c69-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.88.87.187/arm4.Sakura", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "ba1aa2f0-1c69-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.88.87.187/mpsl.Sakura", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "ba1f113a-1c69-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.88.87.187/arm6.Sakura", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "ba209b85-1c69-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.88.87.187/mips.Sakura", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "ba261f42-1c69-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.88.87.187/m68k.Sakura", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "ba27d247-1c69-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.88.87.187/arm5.Sakura", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990086, "uuid": "ba34a567-1c69-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.88.87.187/i586.Sakura", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990225, "uuid": "0c9c5a64-1c6a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.138.182:36538/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990265, "uuid": "24a86d0b-1c6a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.71.252:35123/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990326, "uuid": "493dfa25-1c6a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.255.253:39610/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990565, "uuid": "d7a16d45-1c6a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.215.191.44:48492/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744990631, "uuid": "fe9e7520-1c6a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.happyrace.shop/8m0o22ohgk.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744991225, "uuid": "610c9689-1c6c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.211.24:39108/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744991525, "uuid": "137afcfd-1c6d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.82/sasori", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86_64", "colour": "#8e3094", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744991526, "uuid": "1415d874-1c6d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://paste.ee/r/1FaWKXmz", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744991528, "uuid": "158ae302-1c6d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://paste.ee/r/SaZ1cQnG", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744991704, "uuid": "7e65d686-1c6d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.234.179:54156/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744991824, "uuid": "c5ee8390-1c6d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.141.186:56855/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744991825, "uuid": "c67ee1ad-1c6d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://booking.driveawayrentals.com/profileLayout", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744991826, "uuid": "c70bc296-1c6d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.84.137.205:42984/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744991884, "uuid": "e9bc42ba-1c6d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.224/d", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992453, "uuid": "3cd18863-1c6f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.158.139:57854/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992605, "uuid": "979bb638-1c6f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.238.137:60288/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992667, "uuid": "bc0c870f-1c6f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.32.133:35021/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992726, "uuid": "df4582ca-1c6f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.234.58:60327/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992786, "uuid": "032b3815-1c70-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.vizolu.com/Downloads/Commercial_Proposal_Request.pdf.lnk", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992844, "uuid": "25f3e992-1c70-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.224.177.119/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992845, "uuid": "26562353-1c70-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.224.150.48/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992845, "uuid": "2660777d-1c70-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.218.170:42855/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992845, "uuid": "2699f3a9-1c70-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.173.148.129:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992845, "uuid": "269edc57-1c70-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.205.112.225:8000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992845, "uuid": "26a32deb-1c70-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://90.174.6.194:1555/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992845, "uuid": "26a65867-1c70-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.50.190.133:9301/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992845, "uuid": "26ad2dfd-1c70-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.78.80:2003/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992847, "uuid": "27a079fe-1c70-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.31.213:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744992905, "uuid": "4a4ac866-1c70-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.145.56:40320/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993026, "uuid": "924f713a-1c70-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.57.122.121/mig", "Tag": [ { "name": "Cleanlog", "colour": "#6e4d28", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "LogWiper", "colour": "#FE3C3F", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993044, "uuid": "9d53b249-1c70-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.67.62:47353/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993144, "uuid": "d8b5125c-1c70-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.224/z", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993264, "uuid": "20582b47-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.138.4/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993264, "uuid": "205ee88c-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.224.133.187/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993265, "uuid": "2076bdb3-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.152.255.227:81/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993265, "uuid": "207dce46-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.82.188.47:10000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993265, "uuid": "20be28b3-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.84.137.205:42984/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993266, "uuid": "212cdeb7-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.28.75.169:8081/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993266, "uuid": "2179cda7-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.169.217.235/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993267, "uuid": "21b5e9f5-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.227.169.55:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993291, "uuid": "300ae72d-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.137.84.190:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993334, "uuid": "4a25afb2-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.123.26.174:8889/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993385, "uuid": "68892244-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.6.3.16:57610/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993385, "uuid": "68921747-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.121.70.32:34897/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "6897c5f3-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.241.146.135/bins/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "6898cdc4-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.241.146.135/bins/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "689a611c-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.241.146.135/bins/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "68b2db62-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.241.146.135/bins/boatnet.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "68b2e0b9-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.241.146.135/bins/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "68b35825-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.241.146.135/bins/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "68b3592b-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.241.146.135/bins/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "68b4a501-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.241.146.135/ohshit.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "68b5f7d3-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.241.146.135/bins/boatnet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "68b60042-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.241.146.135/bins/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "68c66782-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.241.146.135/bins/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "68e2f74e-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.241.146.135/bins/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "68e8c797-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.57.223:49830/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "68fef075-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.91.104.105:1912/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993386, "uuid": "6925b55c-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.235.242.52:1232/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993388, "uuid": "69d69b38-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.71.28.19:55469/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993388, "uuid": "69d69ce1-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.30.44.100:60128/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993388, "uuid": "69d6a424-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.227.244.227:23270/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993388, "uuid": "69d6a508-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.55.238.148:53992/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993388, "uuid": "69fece3f-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.44.181.254:34345/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993388, "uuid": "6a11de45-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.58.60.33:33285/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993388, "uuid": "6a25de9a-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.246.87:65204/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993388, "uuid": "6a303c27-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.235.213.82:51363/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993390, "uuid": "6b26add5-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.182.206.97:8636/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993444, "uuid": "8b78d789-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.241.146.135/bins/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993444, "uuid": "8b900ed4-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.185.233.192/Documents/application_documents.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993445, "uuid": "8bf144bf-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.226.233:33423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993503, "uuid": "aec85be3-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.66.84.133/OKFBVTBZ.mp4", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993504, "uuid": "af7d67db-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.144.18/sysbins.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993504, "uuid": "af81d03a-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.238.137:60288/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993568, "uuid": "d598456f-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.66.84.133/OKFBVTBZ.msi", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993588, "uuid": "e13a21ae-1c71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.19.75:37295/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993985, "uuid": "ce0d8203-1c72-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.221.233:8080/parts/manual.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993988, "uuid": "cfe8f752-1c72-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.221.233:8080/part/setup0314_1.msi", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993989, "uuid": "d058ec12-1c72-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.221.233:8080/part/setup0314_user.msi", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993989, "uuid": "d0680d99-1c72-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.221.233:8080/part/setup0314.msi", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744993989, "uuid": "d086580e-1c72-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.221.233:8080/part/setup0314_old.msi", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994048, "uuid": "f371029c-1c72-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.145.56:40320/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994105, "uuid": "155e50b2-1c73-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.221.229:8080/docs/Tech_Specification.pdf.lnk", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994169, "uuid": "3b8f3eb4-1c73-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.221.229:8080/doc/setup0324_or_1.msi", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994172, "uuid": "3d7944ad-1c73-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.221.229:8080/doc/setup0324_or.msi", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994227, "uuid": "5e1dd4ef-1c73-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.86.237/weedsshd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994227, "uuid": "5e20e49d-1c73-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.86.237/weedntpd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994227, "uuid": "5e224e53-1c73-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.86.237/weedsh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994227, "uuid": "5e3fc0ad-1c73-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.86.237/weedshit", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994227, "uuid": "5e66a719-1c73-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.86.237/weed.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "5e7dcc99-1c73-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.86.237/weedcron", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "5e9585ad-1c73-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.86.237/weedtelnetd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "5ea47aa1-1c73-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.86.237/weedftp", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "5eb061c4-1c73-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.86.237/weedwget", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "5eb7c784-1c73-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.86.237/weedapache2", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "5eb8f321-1c73-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.86.237/weedtftp", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "5eb9b39a-1c73-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.86.237/weedbash", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "5eb9b4ab-1c73-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.86.237/weedopenssh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994228, "uuid": "5ebd34b4-1c73-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.86.237/weedpftp", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994244, "uuid": "6806d071-1c73-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.happyrace.shop/n93tkru1od.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994296, "uuid": "877acae3-1c73-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.160.219:44611/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994645, "uuid": "57694533-1c74-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.67.62:47353/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994708, "uuid": "7ca4914c-1c74-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.103:56216/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994853, "uuid": "d36630af-1c74-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.241.175/and", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994945, "uuid": "09e3726e-1c75-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.138.182:36538/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994945, "uuid": "0a014c79-1c75-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.121.70.32:34897/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744994961, "uuid": "139c1252-1c75-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.58.164:34693/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995125, "uuid": "757a3558-1c75-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.123.196:54011/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995144, "uuid": "809c5ce4-1c75-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.51.196:43998/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995185, "uuid": "99364a13-1c75-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.16.198:35257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995186, "uuid": "999f6027-1c75-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.232.172.227:39672/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995305, "uuid": "e0e2b469-1c75-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.19.75:37295/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995367, "uuid": "05db9768-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.225.238:55758/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995368, "uuid": "068a84ce-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://eagerteck.com/chess/Qoffcz.vdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "0691d7d9-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://eagerteck.com/starlight/Cxhjf.mp3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "06b48b79-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://eagerteck.com/horse/Nshsjl.vdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "06c68663-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://eagerteck.com/radio/Ofmfjrex.dat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "06d1685b-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://eagerteck.com/music/Vhupj.wav", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "06dd1994-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://eagerteck.com/starlight/Hgetufmt.mp4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "06e79799-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://eagerteck.com/newton/Qjczgfkjhab.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "06eb455c-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://eagerteck.com/nobel/Npkqjthuj.vdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "0701666e-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://eagerteck.com/chess/Jgekmyuvjq.wav", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "0703b02f-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://eagerteck.com/donkey/Hghrbveifb.vdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995369, "uuid": "0713ca32-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://eagerteck.com/donkey/Wgoqtbpz.vdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995370, "uuid": "075714c8-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://eagerteck.com/donkey/Ixbvdf.mp3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995426, "uuid": "28d83496-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.79/HOST/obfuscated%20(13).rar", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995427, "uuid": "296a1d19-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.79/HOST/NEWDEVVV.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995427, "uuid": "2992611c-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.79/HOST/obfuscated%20(12).rar", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995427, "uuid": "2992a4e8-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.79/HOST/PO_1110011122121001221.pdf.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995427, "uuid": "29982ec2-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.79/HOST/Purchase%20Order_110012211.pdf.js", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995427, "uuid": "29b4b799-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.79/HOST/BLACKSHEEP.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995428, "uuid": "29d83724-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.137.160:49950/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995428, "uuid": "29fc7b76-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.79/HOST/big77777.aska", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995428, "uuid": "2a22cf5b-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.79/HOST/CZXCVTD.exe", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995428, "uuid": "2a22cf6e-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.79/HOST/DEVNEW.ps1", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995428, "uuid": "2a3ae446-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.79/HOST/sirdeee.aska", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "2a51964c-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://eagerteck.com/horse/Qknbyfbbfk.mp4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "2a66eeaa-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.79/HOST/BIG7.ps1", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "2a66f274-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.79/HOST/SIR.ps1", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "2a7ad8bc-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://eagerteck.com/nobel/Ihbwk.vdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "2a8c34a7-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://eagerteck.com/music/Eyzmswu.vdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "2a935837-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://eagerteck.com/donkey/Qaytzdjjv.vdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "2a965622-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://eagerteck.com/goose/Xenvowk.wav", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "2ace36fa-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://eagerteck.com/horse/Wtfeuxfv.wav", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995429, "uuid": "2ae5abd8-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://eagerteck.com/chess/Wdjavwrkb.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995430, "uuid": "2b57754e-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://eagerteck.com/newton/Obzmtddvdci.mp4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995468, "uuid": "420b6aa4-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.79/HOST/FoxmailSetup_7.2.25.375.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995484, "uuid": "4b2f4ba0-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://zerrocostygfypj.blogspot.com/", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995484, "uuid": "4b7c0d82-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://bookgetlisting.click/", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995484, "uuid": "4ba230d5-1c76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.255.85.207/tpnl98/fresh.html", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995795, "uuid": "048eda10-1c77-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.218.170:42855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995842, "uuid": "20f6ff24-1c77-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.206.158.190/ups.vbs", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995844, "uuid": "21ac64e0-1c77-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.206.158.190/programa.vbs", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995844, "uuid": "21df8dba-1c77-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.169.75.7/31agosto.vbs", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995844, "uuid": "21fd5b5e-1c77-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.169.75.7/sostener.vbs", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995846, "uuid": "22f0f3df-1c77-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.206.158.190/defender.vbs", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995889, "uuid": "3c982c03-1c77-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.206.158.190/12345.vbs", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744995906, "uuid": "46faf53f-1c77-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.203.227:49667/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996144, "uuid": "d50df94b-1c77-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.137.160:49950/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996145, "uuid": "d575f7ab-1c77-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.80.200:54876/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996205, "uuid": "f935b1ce-1c77-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.38.185:56762/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996206, "uuid": "f9972c7a-1c77-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.232.62:35378/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996265, "uuid": "1cd6575b-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.16.198:35257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996386, "uuid": "64dad417-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.146.216/larp.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996386, "uuid": "64dca845-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.146.216/d/xd.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996386, "uuid": "64e5bb90-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.146.216/d/xd.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996386, "uuid": "64e61be9-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.146.216/d/xd.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996386, "uuid": "64e83b01-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.146.216/d/xd.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996386, "uuid": "64e8d4f3-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.146.216/d/xd.i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996386, "uuid": "64ed8b91-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.146.216/d/xd.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996386, "uuid": "64f2ba34-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.146.216/d/xd.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996386, "uuid": "64f44b2c-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.146.216/d/xd.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996445, "uuid": "88259ec5-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.146.216/d/xd.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996445, "uuid": "88416c8f-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.146.216/d/xd.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996445, "uuid": "8847e38e-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.38.146.216/d/xd.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996506, "uuid": "ac66c840-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.187.71:37771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996566, "uuid": "d092464b-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.13.255.33/mqi586", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996566, "uuid": "d09402f2-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.13.255.33/mq.sh", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996567, "uuid": "d0a480ff-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.13.255.33/mqppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996567, "uuid": "d0a4a000-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.13.255.33/mqspcr", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996567, "uuid": "d0a4a9f5-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.13.255.33/mqar4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996567, "uuid": "d0a4faee-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.13.255.33/mqsh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996567, "uuid": "d0abeed6-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.13.255.33/mqar5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996567, "uuid": "d0b173d4-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.13.255.33/mq86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996567, "uuid": "d0d4adfd-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.13.255.33/mqm68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996567, "uuid": "d0f1a6b7-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.13.255.33/mqar6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996568, "uuid": "d1ac7323-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.13.255.33/mqml", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996568, "uuid": "d1ac97c8-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.13.255.33/mqms", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996569, "uuid": "d1e12d58-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.13.255.33/mqi686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996569, "uuid": "d1e4cfa8-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.13.255.33/mqar7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996574, "uuid": "d548d640-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://crypomoon.it.com/part/setup0314.msi", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996645, "uuid": "ff2e5657-1c78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.254.182:34327/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996686, "uuid": "17adeae0-1c79-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.232.172.227:39672/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996793, "uuid": "57866800-1c79-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.195.162.44/S123.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996808, "uuid": "60a53c96-1c79-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.53.16.44:38075/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996866, "uuid": "82f64904-1c79-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://nanomoldcoting.com/doc/setup0324_or_1.msi", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996868, "uuid": "846531ca-1c79-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://nanomoldcoting.com/doc/setup0324_or.msi", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744996984, "uuid": "c962a0dd-1c79-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.190.203.66:81/billjenkinbins.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744997224, "uuid": "58b1f03a-1c7a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.38.185:56762/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744997534, "uuid": "1139cfcc-1c7b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.18.75:48296/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744997584, "uuid": "2f2065ae-1c7b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.203.227:49667/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744997584, "uuid": "2f5f7b03-1c7b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.254.182:34327/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744997764, "uuid": "9aa96436-1c7b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.93.3:36144/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744997829, "uuid": "c14aea4a-1c7b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.happyrace.shop/ore3ik3xq9.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744997956, "uuid": "0ca403e3-1c7c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/t", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "vshell", "colour": "#d2c6e9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744998306, "uuid": "dd61a41e-1c7c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.249.159.14:49328/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744998364, "uuid": "004b41e6-1c7d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.17.162/mine/random.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744998427, "uuid": "25a6d098-1c7d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.38.123.165:55591/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744998665, "uuid": "b3a2a5f5-1c7d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.156.46:44976/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744998685, "uuid": "bf2d3606-1c7d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.22.28:39343/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744998725, "uuid": "d6e97701-1c7d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.32.180:52082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744998726, "uuid": "d7be8158-1c7d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.8.73:33101/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744998904, "uuid": "4207d0b3-1c7e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.151.199:57587/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744998905, "uuid": "423d2890-1c7e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.212.157:38159/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744998963, "uuid": "654358b0-1c7e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/1.c", "Tag": [ { "name": "c", "colour": "#5249f7", "exportable": true, "hide_tag": false }, { "name": "cve-2021-4034", "colour": "#e204b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999143, "uuid": "d095c7a1-1c7e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/r.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999145, "uuid": "d188c87e-1c7e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/svv.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999145, "uuid": "d18d0f09-1c7e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/xo.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999145, "uuid": "d1962172-1c7e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/xa.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999145, "uuid": "d19d7265-1c7e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/xxo.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999146, "uuid": "d2070d9c-1c7e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/socat", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "socat", "colour": "#082102", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999149, "uuid": "d3f7cdba-1c7e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/cdk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999149, "uuid": "d42d20eb-1c7e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/darm", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999205, "uuid": "f5825812-1c7e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/xv.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999205, "uuid": "f5825852-1c7e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/sc.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999263, "uuid": "17dfb0cd-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.254.84.240:40198/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999325, "uuid": "3cb1b98c-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/xs.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999326, "uuid": "3d58a046-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.6.255:58718/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999384, "uuid": "601f79d3-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/xx.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999445, "uuid": "84603669-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.63.230:53422/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999446, "uuid": "84a0f4af-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/tv/python3.7.3.so", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ProcHider", "colour": "#F8DF17", "exportable": true, "hide_tag": false }, { "name": "rootkit", "colour": "#656659", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999446, "uuid": "84a28175-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/tt/xm.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999446, "uuid": "84c0616d-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/tv/xt.sh", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999446, "uuid": "84c0c74d-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/tc/xm.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999446, "uuid": "84c2a6f8-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/tc/cron.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999446, "uuid": "84c6d7d9-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/tc/s.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999446, "uuid": "84cb4e29-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/tt/xt.sh", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999446, "uuid": "84cf35b0-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/tt/python3.7.3.so", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ProcHider", "colour": "#F8DF17", "exportable": true, "hide_tag": false }, { "name": "rootkit", "colour": "#656659", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999446, "uuid": "84e1cba9-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/tc/python3.7.3.so", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ProcHider", "colour": "#F8DF17", "exportable": true, "hide_tag": false }, { "name": "rootkit", "colour": "#656659", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999446, "uuid": "852e9794-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.69.61.236:54606/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999447, "uuid": "85432876-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/tt/x5.sh", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999447, "uuid": "855a602d-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/tv/xm.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999448, "uuid": "85eb8e9a-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.99.219:41337/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999448, "uuid": "85ee9dad-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.211.105:51116/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999448, "uuid": "86355fd9-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.18.75:48296/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999448, "uuid": "864f2a76-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.207.124.36:40923/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999449, "uuid": "86af0987-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.208.104.7:44313/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999449, "uuid": "86ca7f5e-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/tc/cloud", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999460, "uuid": "8d1c7990-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.5.1.63:48000/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999474, "uuid": "9575f7d8-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.191.2:54621/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999474, "uuid": "9579bfb1-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.185.1.37:36930/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999474, "uuid": "9579c05c-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.84.137:32783/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999474, "uuid": "9599d110-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.130.24:50194/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999474, "uuid": "959bb184-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.97.137.246:45776/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999474, "uuid": "959bc0fb-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.194.13.127:34933/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999474, "uuid": "959c484b-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.97.137.246:49810/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999474, "uuid": "95a957e9-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.102.189.190:58126/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999474, "uuid": "95be3f58-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.97.136.176:34472/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999474, "uuid": "95c2c717-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/sd/python", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999474, "uuid": "95ce3c42-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.228.53:35681/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999474, "uuid": "95d009a9-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/tv/python", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999474, "uuid": "95d40123-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/tt/t-rex", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999480, "uuid": "992dbee5-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/sd/python3", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999486, "uuid": "9c8a0455-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/tt/python3.7.3", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999486, "uuid": "9ce0f8de-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/tv/python3.7.3", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999489, "uuid": "9ec0d9c4-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.100.32:34018/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999505, "uuid": "a8568834-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.170.27:35390/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999506, "uuid": "a8d0193d-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.220.189.18:33019/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999519, "uuid": "b087d83c-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.141.49.113/tt/tt/python3.6.3", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999564, "uuid": "cb77036e-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.58.164:34693/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999565, "uuid": "cbef3e42-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.8.73:33101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999565, "uuid": "cbf94194-1c7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.249.159.14:49328/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999744, "uuid": "3667235d-1c80-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.43.60:48457/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999805, "uuid": "5b1a27b6-1c80-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.183.21:55853/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1744999925, "uuid": "a2af495b-1c80-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.22.122.98:40288/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745000044, "uuid": "e96ea094-1c80-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.32.180:52082/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745000285, "uuid": "79041142-1c81-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.6.255:58718/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745000345, "uuid": "9d03be1e-1c81-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.232.225:37926/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745000466, "uuid": "e4dedafb-1c81-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.5.96.248:41985/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745000587, "uuid": "2cc64cd3-1c82-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.36.18:46964/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745000763, "uuid": "96271a49-1c82-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.254.84.240:40198/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745000825, "uuid": "ba94c033-1c82-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.220.189.18:33019/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745001066, "uuid": "4aaa75b2-1c83-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.175.104:48959/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745001084, "uuid": "557c725a-1c83-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.239.51:52897/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745001185, "uuid": "91b4f9f4-1c83-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.22.122.98:40288/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745001305, "uuid": "d90b3706-1c83-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.115.123:41741/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745001425, "uuid": "208de0f7-1c84-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.232.225:37926/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745001431, "uuid": "24295ae8-1c84-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.happyrace.shop/3f0m190ovj.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745001609, "uuid": "8e19c410-1c84-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.74.216:42925/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745001726, "uuid": "d3c46801-1c84-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.5.96.248:41985/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745002685, "uuid": "0fc296d2-1c87-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.175.104:48959/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745002745, "uuid": "337a55c6-1c87-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.250.55:46554/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745002926, "uuid": "9ee0e683-1c87-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.234.162:35627/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745003283, "uuid": "7402795b-1c88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.qicon.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745003345, "uuid": "991138c1-1c88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.167.117:38241/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745003885, "uuid": "dacbb938-1c89-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.250.55:46554/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004006, "uuid": "22fe26c6-1c8a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.234.162:35627/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004424, "uuid": "1c177e4c-1c8b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.178.83:55924/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004487, "uuid": "4162ff94-1c8b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.17.162/files/martin1/random.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004489, "uuid": "428bd8b2-1c8b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.17.162/files/ebash/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004489, "uuid": "428bdfd3-1c8b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.17.162/files/martin3/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004489, "uuid": "42ee3636-1c8b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.17.162/files/unique2/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004490, "uuid": "438bf875-1c8b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.17.162/files/martin2/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004491, "uuid": "43cf8f4e-1c8b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.17.162/files/unique3/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004492, "uuid": "44c3229e-1c8b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.17.162/files/unique1/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004545, "uuid": "641115dc-1c8b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.102.15:36522/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004545, "uuid": "644d6083-1c8b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.229.121:40243/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004545, "uuid": "6463f575-1c8b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.121.68.43:39463/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004845, "uuid": "171a8845-1c8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.103.183:55676/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745004905, "uuid": "3ae4ac35-1c8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.45.91:44366/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005027, "uuid": "83654c74-1c8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.happyrace.shop/lsd4tppfaq.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005085, "uuid": "a5c0d405-1c8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.102.15:36522/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005324, "uuid": "347f46e4-1c8d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.115.123:41741/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005324, "uuid": "349c8410-1c8d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.38.179:42793/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005388, "uuid": "5a7049f8-1c8d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.174.37:36844/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005805, "uuid": "535958c1-1c8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/jaws", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005806, "uuid": "53922b71-1c8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.121.68.43:39463/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005809, "uuid": "558352fb-1c8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.115.89.32:34470/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005865, "uuid": "76f5b48e-1c8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/ma/meihao.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005865, "uuid": "7709be0b-1c8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/ma/meihao.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005865, "uuid": "7728cee8-1c8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/ma/meihao.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005866, "uuid": "7740f8db-1c8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/ma/meihao.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005925, "uuid": "9a83fb82-1c8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.52.21:43430/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005925, "uuid": "9ae37ab9-1c8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/ma/meihao.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005925, "uuid": "9ae3ffff-1c8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/ma/meihao.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005925, "uuid": "9ae40a11-1c8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/ma/meihao.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005925, "uuid": "9ae5d0e1-1c8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/ma/meihao.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005926, "uuid": "9b06f6e9-1c8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/ma/meihao.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005926, "uuid": "9b491564-1c8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/ma/meihao.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005926, "uuid": "9b52fd3d-1c8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/ma/meihao.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005926, "uuid": "9b7c4dfe-1c8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/ma/meihao.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005926, "uuid": "9b8bc064-1c8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/ma/meihao.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745005985, "uuid": "be96b788-1c8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.229.121:40243/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006165, "uuid": "29d4e40a-1c8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.17.162/files/5407123006/ePGPfIW.bat", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "CoinMiner.XMRig", "colour": "#354D4B", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006165, "uuid": "29ecb80e-1c8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.103.183:55676/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006166, "uuid": "2a7e8ad4-1c8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.17.162/files/6358048054/GitcS6s.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006167, "uuid": "2ab049dd-1c8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.17.162/files/7868694459/EDw9ZtV.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006167, "uuid": "2ad0662f-1c8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.17.162/files/6629342726/i5Kz53x.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006167, "uuid": "2ad777b8-1c8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.17.162/files/6336929412/Hmcm0Oj.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006167, "uuid": "2aec72aa-1c8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.17.162/off/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006167, "uuid": "2b02c382-1c8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.17.162/files/5561582465/235T1TS.exe", "Tag": [ { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006167, "uuid": "2b0b31ba-1c8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.17.162/files/1058602646/aZOpr5t.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006167, "uuid": "2b115296-1c8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.17.162/files/7453936223/LAc2heq.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006239, "uuid": "55ff5697-1c8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.75.51:57798/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006406, "uuid": "b923f26e-1c8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/realtek", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006406, "uuid": "b92aa28a-1c8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/lg", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006406, "uuid": "b9333513-1c8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/zte", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006406, "uuid": "b940dde1-1c8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/goahead", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006406, "uuid": "b97bbce1-1c8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/zyxel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006406, "uuid": "b9804c2e-1c8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/gpon443", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006407, "uuid": "b9c72e0e-1c8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/hnap", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006407, "uuid": "b9c73064-1c8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/aws", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006464, "uuid": "dc41d8bc-1c8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/pulse", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006465, "uuid": "dc7f65fb-1c8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.15.55.225:48328/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006465, "uuid": "dcc9aadf-1c8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/yarn", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006525, "uuid": "008effa2-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/huawei", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006584, "uuid": "23b633d4-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/shell.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006585, "uuid": "23de73c8-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.193.176:42965/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006643, "uuid": "46e8dc27-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.51.98/thinkphp", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "9070d40f-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/ma/meihao.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "9075cd21-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/ma/meihao.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "908bc4c3-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/ma/meihao.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "908bc73a-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/ma/meihao.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "9095bdda-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/ma/meihao.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "90980c89-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/gpon443", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "9098efa8-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/ma/meihao.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "909c003e-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/zte", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "909c07e1-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/thinkphp", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "909feabc-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/shell.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "90a02298-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/ma/meihao.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "90a4d038-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/goahead", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "90a7caf8-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/jaws", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "90aaa77b-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/ma/meihao.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "90ae3176-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/huawei", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "90ae4152-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/yarn", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "90b19e71-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/aws", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "90b4c748-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/ma/meihao.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "90b4ce47-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/lg", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "90b4d219-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/hnap", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "90b4d34e-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/realtek", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "90b8cd4d-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/ma/meihao.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "90b8d14f-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/zyxel", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006767, "uuid": "90b8d606-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/pulse", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006824, "uuid": "b26692e2-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/ma/meihao.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006824, "uuid": "b2977a64-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/ma/meihao.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006824, "uuid": "b2a73405-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.167.117:38241/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745006825, "uuid": "b367cc85-1c90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://0x503.3738.org/ma/meihao.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745007305, "uuid": "d14fb887-1c91-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.62.195:52061/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745007620, "uuid": "8d46a53d-1c92-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.38.179:42793/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745007785, "uuid": "ef2a0d23-1c92-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.193.176:42965/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745007845, "uuid": "1369ac57-1c93-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.75.51:57798/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745008145, "uuid": "c5af16a7-1c93-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.202.56:51705/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745008446, "uuid": "7962499f-1c94-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.56.255:38611/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745008506, "uuid": "9d01aef0-1c94-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.237.166:40261/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745008508, "uuid": "9e67e5fb-1c94-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.111.142:38871/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745008624, "uuid": "e3ac6086-1c94-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.62.195:52061/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745008625, "uuid": "e40b276d-1c94-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.34.125.71:58714/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745008625, "uuid": "e41c8355-1c94-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.happyrace.shop/g0jmxmyapu.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745009344, "uuid": "90db1ce3-1c96-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.51.196:43998/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745009465, "uuid": "d8bf2e22-1c96-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.146.7:45203/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745009585, "uuid": "200b63da-1c97-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.202.56:51705/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745009885, "uuid": "d319d187-1c97-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.56.255:38611/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010065, "uuid": "3e0e0c2b-1c98-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.67.104:54564/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010183, "uuid": "84f376b7-1c98-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.34.125.71:58714/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010184, "uuid": "854c9c86-1c98-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.111.142:38871/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010245, "uuid": "a9a83f23-1c98-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.234.41:40253/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010245, "uuid": "a9e25e12-1c98-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.190.55.253:38149/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010245, "uuid": "a9e41329-1c98-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.237.1:49393/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010245, "uuid": "a9e4e713-1c98-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.86.74:51315/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010246, "uuid": "aa0663e7-1c98-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.172.49.145:41255/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010246, "uuid": "aa2e9040-1c98-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.182.96.249:59987/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010246, "uuid": "aa47b7e0-1c98-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.101.30:38542/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010246, "uuid": "aa5dfff3-1c98-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.230.66.25:11856/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010246, "uuid": "aa70a52d-1c98-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.231.219:44454/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010246, "uuid": "aa851bb7-1c98-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.68.31:47409/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010248, "uuid": "ab979d4b-1c98-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.137.102:58666/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010250, "uuid": "acdb85b5-1c98-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.57.0.93:56103/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010260, "uuid": "b295296f-1c98-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.25.157:43253/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010273, "uuid": "ba3f5e91-1c98-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.46.148:56827/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010273, "uuid": "ba597cae-1c98-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.194.13.127:50426/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010273, "uuid": "ba621a1b-1c98-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.21.10.46:42575/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010274, "uuid": "bab325fa-1c98-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.237.147.50:38156/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010425, "uuid": "14bf2a54-1c99-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.26.81.68:60371/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010724, "uuid": "c6fbbe7f-1c99-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.52.21:43430/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745010788, "uuid": "ed4ce193-1c99-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.237.90:41509/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745011385, "uuid": "512bcc2a-1c9b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.132.111:47210/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745011389, "uuid": "53b18bcd-1c9b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.235.19:51543/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745011505, "uuid": "9891a458-1c9b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.182.96.249:59987/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745011745, "uuid": "27a11a79-1c9c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.132.151:45501/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745011866, "uuid": "6fb26a4d-1c9c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.26.81.68:60371/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745012105, "uuid": "fe3a76be-1c9c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.184.173:36009/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745012106, "uuid": "feb62f68-1c9c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.94.7:60953/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745012198, "uuid": "35c15c54-1c9d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.242.101:42410/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745012214, "uuid": "3f7af6ff-1c9d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.happyrace.shop/juzqwbxilv.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745012405, "uuid": "b0fda27d-1c9d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.67.104:54564/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745012533, "uuid": "fd2be834-1c9d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.73.142:42828/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745012585, "uuid": "1c27c1fa-1c9e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.132.151:45501/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745012585, "uuid": "1c771c7c-1c9e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.237.90:41509/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745012645, "uuid": "40292f0b-1c9e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.146.7:45203/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745012646, "uuid": "407b43ee-1c9e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.127.166:55727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745012646, "uuid": "4088e747-1c9e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.191.189:42857/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745013185, "uuid": "81fd0997-1c9f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.216.161.65:56875/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745013245, "uuid": "a5952a8d-1c9f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.178.83:55924/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745013425, "uuid": "110a4f6f-1ca0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.77.81:51922/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745013743, "uuid": "ceab941f-1ca0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.104.83:54150/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745013790, "uuid": "eabaea08-1ca0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.219.206.18:46718/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745013873, "uuid": "1c048fb7-1ca1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.235.19:51543/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745014085, "uuid": "9aba3c93-1ca1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.124.205.199:49908/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745014265, "uuid": "05cdb3d1-1ca2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.235.60:53108/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745014326, "uuid": "2a212aca-1ca2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.32.29:52685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745014385, "uuid": "4d0d60d2-1ca2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.127.166:55727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745014746, "uuid": "24283f7f-1ca3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.216.161.65:56875/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745014759, "uuid": "2bf01dad-1ca3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.104.21:47899/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745014805, "uuid": "478dca40-1ca3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.157.149:43699/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745014864, "uuid": "6ac72cda-1ca3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.89.112:55517/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745014924, "uuid": "8e831129-1ca3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.226.233:33423/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745014989, "uuid": "b560dd0d-1ca3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.90.91:12457/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745015169, "uuid": "20a6ccb9-1ca4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.219.206.18:46718/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745015224, "uuid": "41990d63-1ca4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.104.83:54150/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745015405, "uuid": "ad397d42-1ca4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.70.244:45129/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745015826, "uuid": "a7e05873-1ca5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.32.29:52685/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745015826, "uuid": "a7e0ca61-1ca5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.happyrace.shop/7x64o811ru.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745015840, "uuid": "b0a6b43e-1ca5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.188.40:49418/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745015886, "uuid": "cbcfce40-1ca5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.22.174.166:39366/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745016005, "uuid": "1324c183-1ca6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.201.91.42:35685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745016006, "uuid": "13a141e8-1ca6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.249.135:41457/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745016245, "uuid": "a2051efd-1ca6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.228.21.17:57716/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745016320, "uuid": "ceda4ef5-1ca6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.157.149:43699/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745016628, "uuid": "864f855f-1ca7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.63.20:44328/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745016665, "uuid": "9c470404-1ca7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.133.170.27:51492/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745016845, "uuid": "07ab2ef3-1ca8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.228.21.17:57716/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745016906, "uuid": "2bb83b76-1ca8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.96.105:59631/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745017265, "uuid": "01b34b88-1ca9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.77.81:51922/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745017325, "uuid": "25dd16e2-1ca9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.164.214:45721/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745017341, "uuid": "2f0fcb20-1ca9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.24.247:59676/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745017385, "uuid": "49464c84-1ca9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.208.204.56:53804/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745017386, "uuid": "49da3772-1ca9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.22.174.166:39366/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745017506, "uuid": "91cf3a91-1ca9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.249.135:41457/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745017625, "uuid": "d8bd00e9-1ca9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.138.151:43659/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745017745, "uuid": "1fe174a2-1caa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.201.91.42:35685/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745017864, "uuid": "67274e2a-1caa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.24.39:40458/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745017868, "uuid": "696554e5-1caa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.15.139:45877/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745018045, "uuid": "d2bdf011-1caa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.225.160.253:33176/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745018285, "uuid": "61b70e0c-1cab-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.180.79:38490/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745018406, "uuid": "aa4134f1-1cab-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.96.105:59631/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745018407, "uuid": "aa4987dc-1cab-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.20.152:58635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745019246, "uuid": "9e6a14fc-1cad-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.7.171:59570/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745019320, "uuid": "cabbfa87-1cad-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.119.66:46512/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745019366, "uuid": "e635cf36-1cad-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.233.236:36819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745019425, "uuid": "097fd839-1cae-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.38.205.1:58445/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745019426, "uuid": "09c6bfe9-1cae-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.happyrace.shop/8utz5x1wyw.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745019484, "uuid": "2cb27442-1cae-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.180.79:38490/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745019786, "uuid": "e0576ffc-1cae-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.163.196:35038/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745019907, "uuid": "288614d4-1caf-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.61.26:43961/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745020026, "uuid": "6f64a83b-1caf-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.25:55830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745020144, "uuid": "b5bc153d-1caf-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.saguf.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745020624, "uuid": "d43c5253-1cb0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.15.139:45877/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745020624, "uuid": "d43d33c5-1cb0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.20.152:58635/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006763, "uuid": "8e5a708f-1c90-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "0x503.3738.org" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744976763, "uuid": "b4993a7f-1c4a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.69.58.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744944663, "uuid": "f77db639-1bff-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.22.242.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744956182, "uuid": "c9b2181b-1c1a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.80.10.156", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744967043, "uuid": "12f1e53d-1c34-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.173.211.183", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977783, "uuid": "1507bd20-1c4d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.206.102.139", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977783, "uuid": "1507eab9-1c4d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.207.125.40", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977783, "uuid": "150875c0-1c4d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.207.125.60", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999442, "uuid": "82be8d4d-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.208.104.7", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744956243, "uuid": "edf8dcc0-1c1a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.210.101.132", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744964703, "uuid": "a09c5ddd-1c2e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.44.98.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744945443, "uuid": "c8c09549-1c01-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.48.64.1", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951082, "uuid": "e9ec8893-1c0e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.77.241.175", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953303, "uuid": "1588f0df-1c14-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.95.196.49", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981323, "uuid": "52c94cef-1c55-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.101.249.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745010243, "uuid": "a8518e43-1c98-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.57.0.93", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999261, "uuid": "16e93c05-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.254.84.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744985463, "uuid": "f67d0df4-1c5e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.180.137.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744979703, "uuid": "8d09d506-1c51-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.163.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744984083, "uuid": "bfe2361b-1c5b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.249.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993382, "uuid": "66c5b981-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.183.57.223", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953663, "uuid": "ec20f469-1c14-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.172.7.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744970477, "uuid": "11e54a35-1c3c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.225.160.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744938363, "uuid": "4caa7ef3-1bf1-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.232.170.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744962662, "uuid": "e0193e18-1c29-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.238.180.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744965543, "uuid": "95067bd3-1c30-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.96.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999442, "uuid": "82b5c681-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.100.32", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004542, "uuid": "62a50825-1c8b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.121.68.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993382, "uuid": "66c59880-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.121.70.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744979523, "uuid": "21b8aebe-1c51-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.121.73.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993262, "uuid": "1f096cf2-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.169.217.235", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996143, "uuid": "d4008f85-1c77-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.80.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744944543, "uuid": "b000cc75-1bff-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.73.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977423, "uuid": "3e3b5eb2-1c4c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.25.235.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993382, "uuid": "66c58b21-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.227.244.227", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745011383, "uuid": "4fd0c92f-1c9b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.132.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745011743, "uuid": "26780a58-1c9c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.132.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744936863, "uuid": "ce436a11-1bed-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.133.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744934643, "uuid": "a30e3bd1-1be8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.55.90", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744988703, "uuid": "818ba627-1c66-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.24.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744945443, "uuid": "c8c049f5-1c01-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.181.164", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744970643, "uuid": "7535d810-1c3c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.22.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744957563, "uuid": "00849ea8-1c1e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.220.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744967043, "uuid": "12f1bf99-1c34-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.231.75", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744978923, "uuid": "bc4de628-1c4f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.39.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744958223, "uuid": "8a1acbe2-1c1f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.41.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744966383, "uuid": "89e39dad-1c32-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.149.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744949043, "uuid": "2a78077c-1c0a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.150.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744949763, "uuid": "d79e2b6d-1c0b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.80.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744935483, "uuid": "97c84478-1bea-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.10.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744986242, "uuid": "c6cd7ec8-1c60-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.119.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744937043, "uuid": "39d09af5-1bee-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.120.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744955883, "uuid": "1730c037-1c1a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.149.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744964043, "uuid": "173d9d4e-1c2d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.98.167.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744943283, "uuid": "c13f2f11-1bfc-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.53.16.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744939804, "uuid": "a7495d6c-1bf4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.178.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999503, "uuid": "a6a52706-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.170.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959963, "uuid": "972b7eba-1c23-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.174.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744976342, "uuid": "ba2792e6-1c49-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.175.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999803, "uuid": "59aa6294-1c80-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.183.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744986782, "uuid": "08d5b808-1c62-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.235.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744957142, "uuid": "05ffe13e-1c1d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.112.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996203, "uuid": "f7fe5a4b-1c77-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.232.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977783, "uuid": "15087bef-1c4d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.233.209", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745019363, "uuid": "e484f1ea-1cad-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.233.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744945443, "uuid": "c8c0a7f0-1c01-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.236.88", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744940403, "uuid": "0cb2b3dc-1bf6-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.83.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744974903, "uuid": "60325df2-1c46-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.145.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745009462, "uuid": "d6ffa458-1c96-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.146.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744975443, "uuid": "a225e8c5-1c47-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.202.95.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744969804, "uuid": "80af8412-1c3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.203.252.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983483, "uuid": "5a097db2-1c5a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.166.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744934583, "uuid": "7f4bbe21-1be8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.167.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744952942, "uuid": "3e9547a2-1c13-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.100.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745013722, "uuid": "c251693f-1ca0-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.104.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990203, "uuid": "ffcad472-1c69-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.138.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744980723, "uuid": "ed03e2cb-1c53-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.18.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744963803, "uuid": "882ff279-1c2c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.18.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744945683, "uuid": "578949f4-1c02-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.65.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993023, "uuid": "90c298d9-1c70-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.67.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006222, "uuid": "4c05017d-1c8f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.75.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744978263, "uuid": "32ead6ef-1c4e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.79.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994283, "uuid": "7f9ef0e5-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.160.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993563, "uuid": "d24a1e5a-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.19.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744938662, "uuid": "fef67d0d-1bf1-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.20.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745001064, "uuid": "49236996-1c83-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.239.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745010243, "uuid": "a8522ae0-1c98-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.25.157", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744952642, "uuid": "8ba9c7b7-1c12-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.25.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744936263, "uuid": "68e18396-1bec-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.90.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744974363, "uuid": "1e706301-1c45-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.45.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744955582, "uuid": "643a93eb-1c19-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.248.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744956243, "uuid": "edf721f9-1c1a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.251.219", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744958763, "uuid": "cbd37b53-1c20-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.50.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995123, "uuid": "747ce4ec-1c75-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.51.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744972803, "uuid": "7c7098f7-1c41-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.55.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994942, "uuid": "088a4886-1c75-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.58.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744961823, "uuid": "ebd6af2d-1c27-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.178.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744962483, "uuid": "75351266-1c29-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.183.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744941003, "uuid": "725c2232-1bf7-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.191.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744945863, "uuid": "c2c1ad42-1c02-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.57.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745016603, "uuid": "777e5a3f-1ca7-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.63.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744952462, "uuid": "20755650-1c12-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.172.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951683, "uuid": "4ff19d8a-1c10-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.174.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996624, "uuid": "f2e957ec-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.254.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951803, "uuid": "977a1d7a-1c10-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.140.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744998663, "uuid": "b228bf97-1c7d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.22.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744935183, "uuid": "e4fccb27-1be9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.231.147.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745014743, "uuid": "2272e034-1ca3-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.104.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745019303, "uuid": "c0972d54-1cad-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.119.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744965005, "uuid": "544987d5-1c2f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.248.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744937943, "uuid": "527d52b3-1bf0-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.93.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744945443, "uuid": "c8c0630d-1c01-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.226.252", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744971483, "uuid": "69b19009-1c3e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.251.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744988583, "uuid": "3a494f49-1c66-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.252.9", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744939623, "uuid": "3ba5baa1-1bf4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.74.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744944303, "uuid": "2111c219-1bff-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.77.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744934643, "uuid": "a30e3fbe-1be8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.238.59", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744965603, "uuid": "b8d08cc3-1c30-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.8.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744956243, "uuid": "edf6e38c-1c1a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.247.216.209", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995363, "uuid": "0315f543-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.225.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993382, "uuid": "66c53267-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.246.87", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004542, "uuid": "62a50166-1c8b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.102.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999442, "uuid": "82c2a6ec-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.99.219", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745015823, "uuid": "a675b16f-1ca5-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.188.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744991822, "uuid": "c4de9b9f-1c6d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.84.137.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996743, "uuid": "39ad6f47-1c79-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.195.162.44", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005322, "uuid": "3371336a-1c8d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.38.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744956182, "uuid": "c9b22216-1c1a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.118.246.210", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744955763, "uuid": "cfc9c15f-1c19-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.177.109.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744975322, "uuid": "5a2cf031-1c47-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.220.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992603, "uuid": "9626cc31-1c6f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.238.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745002743, "uuid": "322dc29e-1c87-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.250.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745000342, "uuid": "9b13f4a0-1c81-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.232.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744954623, "uuid": "287a0482-1c17-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.30.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992842, "uuid": "24d02f5b-1c70-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.31.213", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744961283, "uuid": "a9cec42e-1c26-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.89.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982463, "uuid": "fa0d2359-1c57-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.84.218.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744980903, "uuid": "58962937-1c54-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.228.102.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745016242, "uuid": "a04bf4ec-1ca6-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.228.21.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744956004, "uuid": "5f5045b7-1c1a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.32.2.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744936562, "uuid": "1b6da2e1-1bed-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.189.31.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999442, "uuid": "82c28d80-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.194.13.127", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744956243, "uuid": "edf6da16-1c1a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.194.13.148", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745000463, "uuid": "e304df2e-1c81-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.5.96.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999442, "uuid": "82c19dba-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.97.136.176", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744945443, "uuid": "c8c06ed3-1c01-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.97.136.198", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744988583, "uuid": "3a497bb0-1c66-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.97.136.232", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999442, "uuid": "82b4c0b6-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.97.137.246", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744967043, "uuid": "12f20408-1c34-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.97.138.180", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744956243, "uuid": "edf70bf1-1c1a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.97.138.199", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977783, "uuid": "15088e8e-1c4d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.97.138.240", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744956243, "uuid": "edf6cefd-1c1a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.97.214.197", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744945443, "uuid": "c8c07062-1c01-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.97.216.181", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744934583, "uuid": "7f4bc47e-1be8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.97.216.188", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744935783, "uuid": "4ad5f662-1beb-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.9.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993442, "uuid": "8a66dd83-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.226.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004903, "uuid": "3947a12a-1c8c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.45.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744976283, "uuid": "96915214-1c49-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.128.132.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981742, "uuid": "4cb124b0-1c56-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.132.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995423, "uuid": "2709ed98-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.137.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744957142, "uuid": "05ffce94-1c1d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.250.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744970343, "uuid": "c20ae2fa-1c3b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.147.103.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745010243, "uuid": "a850cadf-1c98-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.172.49.145", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981683, "uuid": "2976b813-1c56-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.128.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995183, "uuid": "97c764df-1c75-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.232.172.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744998663, "uuid": "b228c1b9-1c7d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.156.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744963023, "uuid": "b73e4a92-1c2a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.34.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744969143, "uuid": "f6adc693-1c38-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.74.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744974004, "uuid": "4806bfdb-1c44-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.131.151.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745014982, "uuid": "b12e8238-1ca3-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.131.90.91", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744961343, "uuid": "cdd30139-1c26-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.132.128.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745003343, "uuid": "97c15a12-1c88-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.167.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744947722, "uuid": "173ef869-1c07-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.93.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745008503, "uuid": "9b8fed3a-1c94-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.95.111.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744955463, "uuid": "1d2e7ab2-1c19-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.123.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951323, "uuid": "796cec0b-1c0f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.225.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745012103, "uuid": "fd472868-1c9c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.94.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995183, "uuid": "97c761ab-1c75-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.16.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744998722, "uuid": "d5a7495d-1c7d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.32.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745012643, "uuid": "3f03c4c7-1c9e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.191.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744942443, "uuid": "cc41bfae-1bfa-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.219.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745014323, "uuid": "2841c188-1ca2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.32.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744980123, "uuid": "8777e288-1c52-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.89.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977783, "uuid": "1508d250-1c4d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "139.218.104.247", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744934583, "uuid": "7f4bd0f2-1be8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "139.5.1.52", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999442, "uuid": "82b3fd02-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "139.5.1.63", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744966983, "uuid": "ef41c272-1c33-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "139.5.11.247", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999442, "uuid": "82b4feba-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.102.189.190", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993262, "uuid": "1f095b83-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.227.169.55", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993442, "uuid": "8a66e051-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "146.185.233.192", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990082, "uuid": "b7d307cc-1c69-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "149.88.87.187", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993382, "uuid": "66c50161-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "151.235.213.82", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992842, "uuid": "24d04831-1c70-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "152.173.148.129", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744998303, "uuid": "db9a5009-1c7c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "162.249.159.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999503, "uuid": "a6a52b27-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "165.220.189.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744943703, "uuid": "bb985a8f-1bfd-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.7.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744956123, "uuid": "a67f890c-1c1a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.85.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744966623, "uuid": "18b6ec59-1c33-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.87.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744976583, "uuid": "49ab79f7-1c4a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.168.155.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744962062, "uuid": "7a41ee7b-1c28-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.27.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744972203, "uuid": "17055111-1c40-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.9.154.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950903, "uuid": "7f139c01-1c0e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.142.122", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993262, "uuid": "1f094922-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.82.188.47", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744968604, "uuid": "b5afe4e0-1c37-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.141.196.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744967462, "uuid": "0d1ea4d4-1c35-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.141.213.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745008622, "uuid": "e27f9183-1c94-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.34.125.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992842, "uuid": "24d05154-1c70-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.50.190.133", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744984323, "uuid": "4ede8938-1c5c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.107.150.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993382, "uuid": "66c51dd1-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "181.71.28.19", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744956063, "uuid": "829203b6-1c1a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.1.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744975023, "uuid": "a7773f36-1c46-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.28.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960504, "uuid": "d97ac4ca-1c24-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.34.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999442, "uuid": "82c31331-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.115.130.24", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950783, "uuid": "377ffde1-1c0e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.23.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950663, "uuid": "efffb67e-1c0d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.60.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745008443, "uuid": "77d3aaa7-1c94-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.56.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981923, "uuid": "b825e2c3-1c56-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.246.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744935904, "uuid": "92ab415a-1beb-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.113.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744985642, "uuid": "614ebe64-1c5f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.117.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745012196, "uuid": "346d1802-1c9d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.242.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744945443, "uuid": "c8c0c61d-1c01-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.87.191", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745012643, "uuid": "3f03d26f-1c9e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.127.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744938004, "uuid": "767d11d9-1bf0-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.164.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744958582, "uuid": "6045fe38-1c20-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.46.86.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745017863, "uuid": "664399d0-1caa-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.15.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744998722, "uuid": "d5a74ba5-1c7d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.8.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744944663, "uuid": "f77daaa1-1bff-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.54.228.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993382, "uuid": "66c4f6c0-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.30.44.100", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995842, "uuid": "2091e9dd-1c77-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "186.169.75.7", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744978443, "uuid": "9e45d0dc-1c4e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "186.45.132.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993262, "uuid": "1f092d74-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.28.75.169", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745010243, "uuid": "a85139c1-1c98-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "189.182.96.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744969863, "uuid": "a4400cca-1c3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.109.227.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745010243, "uuid": "a8532bb3-1c98-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.21.10.46", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993382, "uuid": "66c4e56b-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.241.146.135", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744994223, "uuid": "5bbaa310-1c73-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.251.86.237", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744937223, "uuid": "a510803c-1bee-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "197.207.90.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744956182, "uuid": "c9b20f30-1c1a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.178.112.52", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993382, "uuid": "66c69f78-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.182.206.97", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745014083, "uuid": "993a7b67-1ca1-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "201.124.205.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744997943, "uuid": "04d5fcf3-1c7c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "209.141.49.113", "Tag": [ { "name": "c", "colour": "#5249f7", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "cve-2021-4034", "colour": "#e204b0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ProcHider", "colour": "#F8DF17", "exportable": true, "hide_tag": false }, { "name": "rootkit", "colour": "#656659", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "socat", "colour": "#082102", "exportable": true, "hide_tag": false }, { "name": "vshell", "colour": "#d2c6e9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744955223, "uuid": "8e2a456c-1c18-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "210.10.141.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744954083, "uuid": "e67e81ee-1c15-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "211.219.49.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745006463, "uuid": "db3dc3e0-1c8f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "212.15.55.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993382, "uuid": "66c64105-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "217.58.60.33", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993382, "uuid": "66c7170a-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.91.104.105", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744967043, "uuid": "12f1f115-1c34-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.60.198", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744966203, "uuid": "1e792ad1-1c32-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.173.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744965064, "uuid": "779abc95-1c2f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.4.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977542, "uuid": "856b99d8-1c4c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.50.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744947243, "uuid": "f9928531-1c05-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.201.140.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745016003, "uuid": "11dcdcb8-1ca6-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.201.91.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992842, "uuid": "24d00b5f-1c70-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.205.112.225", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953843, "uuid": "577dbf5a-1c15-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.147.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744984323, "uuid": "4edea1d4-1c5c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.212.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950423, "uuid": "610945af-1c0d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.135.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992842, "uuid": "24d053c8-1c70-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.218.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744975804, "uuid": "78ee3d3b-1c48-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.187.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744963203, "uuid": "22685ce2-1c2b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.241.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744940342, "uuid": "e83958d4-1bf5-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.38.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744948382, "uuid": "a0994d28-1c08-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.214.101.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745013783, "uuid": "e64eea7f-1ca0-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.219.206.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745018404, "uuid": "a8a4b832-1cab-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.15.20.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744941723, "uuid": "1f0d2948-1bf9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.15.53.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744970885, "uuid": "056cd72e-1c3d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.187.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744957262, "uuid": "4d8d0f05-1c1d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.20.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951983, "uuid": "0284ca77-1c11-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.136.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744936922, "uuid": "f1d0502d-1bed-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.139.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959723, "uuid": "0873dcb9-1c23-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.76.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745013183, "uuid": "80e810f7-1c9f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.216.161.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744945142, "uuid": "157866be-1c01-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.106.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744987683, "uuid": "2188718a-1c64-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.35.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745005803, "uuid": "52143481-1c8e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.58.51.98", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744942083, "uuid": "f5c962b5-1bf9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.88.101.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745019423, "uuid": "0838f333-1cae-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.38.205.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745010243, "uuid": "a851ae46-1c98-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.237.1", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744942923, "uuid": "eab0732e-1bfb-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.89.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744966443, "uuid": "ad76cf0d-1c32-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.184.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959003, "uuid": "5b0a2237-1c21-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.247.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983723, "uuid": "e943f797-1c5a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.220.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992663, "uuid": "b9c1f509-1c6f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.32.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744969263, "uuid": "3e84fe13-1c39-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.60.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004843, "uuid": "15977db3-1c8c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.103.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745019783, "uuid": "deeda77a-1cae-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.163.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744971363, "uuid": "220269dd-1c3e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.233.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744946462, "uuid": "2801c4fc-1c04-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.235.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744948443, "uuid": "c48d3af4-1c08-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.97.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744987982, "uuid": "d412ba4c-1c64-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.36.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744940043, "uuid": "35b6e4bd-1bf5-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.89.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744937103, "uuid": "5dc2c188-1bee-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.82.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744945683, "uuid": "57894cf6-1c02-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.54.172.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744973883, "uuid": "0019a25e-1c44-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.208.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744968363, "uuid": "2603ffdd-1c37-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.56.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745010062, "uuid": "3cca3ef3-1c98-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.67.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744961464, "uuid": "15e18c85-1c27-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.141.26.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993382, "uuid": "66c6fb3c-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.6.3.16", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983183, "uuid": "a7a05106-1c59-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "49.81.73.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993382, "uuid": "66c5cf03-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.235.242.52", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993382, "uuid": "66c6fdd1-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.55.238.148", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996383, "uuid": "63359408-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "51.38.146.216", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745015883, "uuid": "ca39c751-1ca5-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.22.174.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744981323, "uuid": "52c95216-1c55-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.255.42.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744967582, "uuid": "54c27268-1c35-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.174.91.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744947482, "uuid": "88207279-1c06-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.66.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744974303, "uuid": "fab8bfb0-1c44-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.83.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744969323, "uuid": "61f58061-1c39-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.88.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953423, "uuid": "5cfbd593-1c14-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.95.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744947064, "uuid": "8e8e4ddd-1c05-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.244.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745010243, "uuid": "a8528997-1c98-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.68.31", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977243, "uuid": "d2a80a1b-1c4b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.129.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744956182, "uuid": "c9b205ab-1c1a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.133.158", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992902, "uuid": "48b181b6-1c70-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.145.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744979643, "uuid": "69419371-1c51-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.149.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992422, "uuid": "2a9678f9-1c6f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.158.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744938423, "uuid": "701dce3e-1bf1-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.22.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744936863, "uuid": "ce437bcd-1bed-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.225.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744947963, "uuid": "a6c7ae8e-1c07-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.23.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744979163, "uuid": "4b6392ad-1c50-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.235.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744946943, "uuid": "46aa4d2a-1c05-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.26.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744978742, "uuid": "50a422fb-1c4f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.3.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744956843, "uuid": "5382f73b-1c1c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.33.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999323, "uuid": "3b75ef7d-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.6.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745019904, "uuid": "26992e39-1caf-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.61.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745019243, "uuid": "9c9dc551-1cad-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.7.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951022, "uuid": "c5eeb98f-1c0e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.4.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744942263, "uuid": "60ffaa0c-1bfa-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.67.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744965723, "uuid": "006857aa-1c31-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.71.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744972023, "uuid": "ab58034c-1c3f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.160.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744962842, "uuid": "4b83fa23-1c2a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.249.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745012523, "uuid": "f7444144-1c9d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.73.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745001603, "uuid": "8aa068dc-1c84-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.74.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744975804, "uuid": "78ee4b19-1c48-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.74.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744960142, "uuid": "02315b04-1c24-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.112.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744948204, "uuid": "3618f54f-1c08-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.117.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745013422, "uuid": "0f901ddb-1ca0-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.77.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992842, "uuid": "24d05d60-1c70-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.78.80", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951742, "uuid": "73612ec0-1c10-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.131.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745017623, "uuid": "d7657c05-1ca9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.138.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950363, "uuid": "3d2dfa59-1c0d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.138.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745016003, "uuid": "11dcda6b-1ca6-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.249.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744957203, "uuid": "2a3d346c-1c1d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.251.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744990323, "uuid": "4734a141-1c6a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.255.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744975922, "uuid": "bfd2fea5-1c48-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.120.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744962062, "uuid": "7a41e4e7-1c28-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.15.60.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744956243, "uuid": "edf72f63-1c1a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.177.242.29", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744986663, "uuid": "c1a838e2-1c61-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.215.191.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744976943, "uuid": "203f3d5a-1c4b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.234.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992722, "uuid": "dd2ab2ab-1c6f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.234.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745011383, "uuid": "4fd0c184-1c9b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.235.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745008503, "uuid": "9b8fea74-1c94-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.237.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745010783, "uuid": "ea3abe1a-1c99-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.237.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744974303, "uuid": "fab8c18f-1c44-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.239.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744951082, "uuid": "e9ecfbbd-1c0e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.96.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744999442, "uuid": "82bdabbc-1c7f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.228.53", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745004542, "uuid": "62a4fdb6-1c8b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.229.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744959123, "uuid": "a29f99a9-1c21-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.24.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744970943, "uuid": "27bbae89-1c3d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.27.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745010243, "uuid": "a850ce9f-1c98-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.101.30", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744997523, "uuid": "0ace2cc0-1c7b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.18.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744944063, "uuid": "91fde411-1bfe-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.26.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744936443, "uuid": "d446f833-1bec-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.226.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744944723, "uuid": "1b2d2735-1c00-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.121.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744968303, "uuid": "02549e44-1c37-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.87.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744958763, "uuid": "cbd3910d-1c20-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.92.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745010243, "uuid": "a8518d51-1c98-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "64.237.147.50", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744991523, "uuid": "122659c1-1c6d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "66.63.187.82", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86_64", "colour": "#8e3094", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993262, "uuid": "1f092388-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.137.84.190", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744976043, "uuid": "07a534d5-1c49-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.159.131.11", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744952642, "uuid": "8baa300d-1c12-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.171.255.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983064, "uuid": "605c8bb6-1c59-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.24.200.45", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993262, "uuid": "1f097b8f-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.224.133.187", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992842, "uuid": "24cfe418-1c70-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.224.150.48", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992842, "uuid": "24cffd4c-1c70-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.224.177.119", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996563, "uuid": "cebbf08e-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.13.255.33", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993382, "uuid": "66c6594d-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.44.181.254", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992842, "uuid": "24d0052a-1c70-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "90.174.6.194", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744993262, "uuid": "1f09695a-1c71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.80.138.4", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995483, "uuid": "4a846a1a-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.255.85.207", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744955522, "uuid": "40707b21-1c19-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.6.83.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1744983363, "uuid": "12f93242-1c5a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "98.128.175.145", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950904, "uuid": "7fe5079e-1c0e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "adminisgty7.rest" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1744952644, "uuid": "8cf4eba3-1c12-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "aguout12.lovestoblog.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1744952703, "uuid": "b00fda81-1c12-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "bdnews25.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995483, "uuid": "4aa7b409-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "bookgetlisting.click" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1744991822, "uuid": "c4e7153b-1c6d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "booking.driveawayrentals.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1744963083, "uuid": "dad15404-1c2a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.becyz.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1744982404, "uuid": "d7202cfe-1c57-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.faneg.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1744971363, "uuid": "221c6530-1c3e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.kubab.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745003283, "uuid": "73c982ac-1c88-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.qicon.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745020143, "uuid": "b57afa1e-1caf-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.saguf.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1744953545, "uuid": "a60b64d4-1c14-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.vysub.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996566, "uuid": "d010bf23-1c78-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "crypomoon.it.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995363, "uuid": "032f42f9-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "eagerteck.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950905, "uuid": "8058a302-1c0e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "h1.wildlifeautograph.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950904, "uuid": "7fe4d7e7-1c0e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "medoloki9.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1744996863, "uuid": "815ce143-1c79-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "nanomoldcoting.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1744950904, "uuid": "7fe64c29-1c0e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "qqcxq.dyheg.fun" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1744977243, "uuid": "d2b3646f-1c4b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "repoupdater.ddns.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1744972625, "uuid": "12a8be65-1c41-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "u1.cherubaviation.life" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1744936565, "uuid": "1cae2be5-1bed-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "u1.happyrace.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1744937763, "uuid": "e6c77c96-1bef-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.purepassionwellness.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1744992784, "uuid": "02450093-1c70-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.vizolu.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1744995483, "uuid": "4a925789-1c76-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "zerrocostygfypj.blogspot.com" } ] } }