{ "Event": { "published": true, "date": "2026-04-15", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-15", "timestamp": 1776298528, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "09a178c6-d080-4464-b2d0-7a1bd24946ac", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1776212536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776212536, "uuid": "5bb8bfe3-dc0f-425e-9f54-3bbecec47cd3", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776212536, "uuid": "8ea75245-df51-4d73-ae1b-d226ab36969b", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776212536, "uuid": "9b82890f-dc39-426a-bb04-0acbb8ac24b6", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776212536, "uuid": "ab798717-bf74-4a25-bd78-5cf0494d7c37", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776212536, "uuid": "76ab7a3d-d807-476e-b112-483904688d03", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776213187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776213187, "uuid": "4e8eab9e-eb8b-439c-92eb-324fb226bf04", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776213187, "uuid": "5b1b6cb5-4810-4a48-b94e-f4b1e9094073", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776213187, "uuid": "ce0b4a1b-3d94-4ef2-933a-6e1c0b5b61dc", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776213187, "uuid": "9f9e0e76-201c-429a-90d6-695639de0466", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776213187, "uuid": "0f2542a4-9379-4ab6-9ece-1d3fac8fe1db", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1776213375, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776213375, "uuid": "4f1b0bfd-75f5-4f7d-b688-0f5d715ddea5", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776213375, "uuid": "e772d40a-ddbc-4c1c-b503-d747f1e184d8", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776213375, "uuid": "ba10da47-7684-4c5a-aad6-2625559fb588", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776213375, "uuid": "f8a03542-35d7-4975-b1fc-0e1d3109e20e", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776213375, "uuid": "b3f71565-14b9-4024-add4-70b53dd524b7", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776218833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776218833, "uuid": "6ac79941-916a-4796-ac7b-8fe7cbb99ee7", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776218833, "uuid": "dcdf00a4-305c-4aec-998f-b5b90d42427d", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776218833, "uuid": "a696949f-5a13-4b1d-bc68-7bb374f4ea2c", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776218833, "uuid": "9754f84e-0472-4fe8-9771-d49698f4babf", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776218833, "uuid": "ccb6f828-977b-4be3-93b1-97344f01eda1", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e549e9d3-3878-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776222731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776222731, "uuid": "481327c7-0a56-4b2f-a914-6b24e6dfb433", "comment": "Malware payload", "value": "39286bbb12d108c3a4c3188928abe308", "object_relation": "md5", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776222731, "uuid": "7ed79311-73ba-4330-9c2f-ccbe90235da4", "comment": "Malware payload", "value": "9805635b0d4218518829843661381f2eef8c986402f84871fd320fb2a254b254", "object_relation": "sha256", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776222731, "uuid": "3077e0e7-41d1-4251-862d-ab0cf29b5a05", "value": "T1AB340291E410E86DD9BEC2784FCBE137657A7987131C32BF2240AEA02D35F93439E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776222731, "uuid": "9bdb28e2-d647-40fc-9a9a-8117edac77da", "value": "6144:GCdNamWymLWnC7PYK0C2u3mOyNkbPlVvTCO1hapv9REjGSGT0HLUoY:QTjzYW2SmZMPlVWEhMwL/Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776222731, "uuid": "66c945cd-1f54-4d97-87e8-6403cf2aa1ea", "value": 238378, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776222731, "uuid": "f08eb1fb-832e-4f1b-916f-201a493a4540", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b008335-386e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776224350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776224350, "uuid": "69e8ffdf-74d5-4f03-8685-8fe47431c694", "comment": "Malware payload", "value": "4db4780db78d0997cc3d8a200111412c", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776224350, "uuid": "61568a57-5e5d-4af7-a47f-c5ae3ce60153", "comment": "Malware payload", "value": "ff4ac6fb5ccb661678f8073535e04e3616a82fe7f8086acf5e768afe75ed9d0e", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776224350, "uuid": "6b8a2b42-a716-4bb2-9904-fae32d9b7b36", "value": "T1E0469016EDA805A9C592637A883351537E38B800572133D76AD9636C2F637F4D3BAF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776224350, "uuid": "bbc881e2-11ce-4135-87cc-5cb973599067", "value": "3271ee162568f50a6810be9b8973807f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776224350, "uuid": "eff0d786-f7ba-49ea-be8e-2268e1fab745", "value": "49152:L9yh+eWVLwugzTCR1FEFLyNOsH1BEjGQclvEq2FBDUDOk7VhbvbV5ZS+/ZqqxSlS:L9RZw6qsH1EWZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776224350, "uuid": "7bce3add-dea8-43e5-8a86-2d9202e61080", "value": 5632865, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776224350, "uuid": "9142e562-1cd1-4938-aba7-9167c6ee4e11", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d62979c-387f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776225376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225376, "uuid": "8864e82c-a438-4020-a080-0e78180844d7", "comment": "Malware payload (Mirai)", "value": "7219de430e0c5b78d470ad775fb5ef16", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225376, "uuid": "4e46a83a-338c-49ee-871c-1bf64ff9ac43", "comment": "Malware payload (Mirai)", "value": "b25bc5608232a02fa5e738daa844a81c0e931ef74f5b1249a24098e3e5da470b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225376, "uuid": "820693b9-7e7d-4dd0-844a-55f79ebd5657", "value": "T154B3F845FC409B17C6C665B7FB8E438D7B2A1758E3EE720399256F30378B95A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225376, "uuid": "89663213-ee4d-405c-8fb3-3c83e66ed380", "value": "1536:xjWGe2TXA7kQ4VBL2TFwdQHmbOuYLR846YcQlFclWBwywXMrMqoXmH7qCyO:UGpTXM4v2xwdwNR8vYVI8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776225376, "uuid": "814b2bee-3d5f-45b2-afc2-ef69304c1fd3", "value": 113184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225376, "uuid": "fa86b4cb-6542-4c6a-b527-295a5932a76d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d629bd8-387f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776225376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225376, "uuid": "a7c04cdd-0fd0-4760-9ef6-dc7a08f061fc", "comment": "Malware payload (Mirai)", "value": "3089ffebf572f2f8658a81c84cd97bfc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225376, "uuid": "7ebf9054-83a0-4888-a09d-7f25af3de2b5", "comment": "Malware payload (Mirai)", "value": "5c914e4d5506d92f2b7d25018107d15e3ea9179c2ce60e27ec3237650a74c7d2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225376, "uuid": "39052260-62ec-4a40-8749-375662230838", "value": "T14DB31945FC505B17C6C252BBFB4E428D7B2A1768D3EE720399256F30379B96B0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225376, "uuid": "5e13c85b-5278-4780-811f-710a7648fc84", "value": "1536:YGZ6OjrPA8C+Uq4VtbXJTxt9vPEKOO9rb1hw9ZNqWRPlDHwywyshGz7N7ZOLqEdm:56wrPuq4jZX9vcW1heblT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776225376, "uuid": "590b5605-afb8-4648-ad35-226ac64186b7", "value": 117280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225376, "uuid": "dfda099f-8bfd-46fb-8bb1-83040c4c5295", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d825054-387f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776225376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225376, "uuid": "6c99856c-dd52-4e5b-9fd5-224aa9c2567d", "comment": "Malware payload (Mirai)", "value": "f27d716fa541d20a62b98cd95c686af3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225376, "uuid": "e1bd42b1-21be-4bc8-bb2b-f5d8cc0b6521", "comment": "Malware payload (Mirai)", "value": "47a2b91bc36c41bd67a70f56469dca07f1b9751e0da68118ddd821a2bb19891f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225376, "uuid": "c1fa36c0-8e45-488b-8976-c1720d5746c9", "value": "T152A32863CC262F18D668D4B5B0B19F796BA39920818B1FBF1677C6744083D8DF6093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225376, "uuid": "5f91c8ce-402a-489c-9167-99cc86773430", "value": "1536:rW5ihIo2bCSjKdPaQ7NXAaLAqB8t2bW7s3Liljxf98:2MX2b1GdbOaLAj4bWo3LO92", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776225376, "uuid": "7c7fe715-a238-4505-9210-167cc576655f", "value": 105056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225376, "uuid": "01b29899-1a3a-4453-8e35-7acd6a82e914", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d82955c-387f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776225376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225376, "uuid": "54a5d43e-912d-4322-a39b-606861c2c7a9", "comment": "Malware payload (Mirai)", "value": "a2e3cf62ae607396cdfdf64a63ea0970", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225376, "uuid": "74d0e871-1984-41cd-8d62-27e7f6f33920", "comment": "Malware payload (Mirai)", "value": "5dde3392a1b39edc02f042456957641cec09b5c19ce9eebb50c8f80cf8ba5c07", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225376, "uuid": "27bfe4c2-d030-4429-9c64-ac8d24a64c2c", "value": "T16693F649FD416B10E4D635FAFF4F024973934B6CE3FAB201AA245B2523CAA5B0F764", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225376, "uuid": "9cbe6975-df81-489b-bebb-0ccad5b46c26", "value": "1536:wqnQEMDz8EdtS/pljv8oWKaFuZMgmMGKPlhKv8ioyXi/9RZRYk6:vMkEvqT78oWKaF8MgmhuyXi/9RjH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776225376, "uuid": "0e808a3b-3143-4cf4-8fe3-f4be1c8d8058", "value": 93252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225376, "uuid": "3b1262c3-0a3c-4b55-8704-8d2d158d17e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0dcfc190-387f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776225376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225376, "uuid": "a2316ed7-1b60-41fb-8ad9-963f6571e85f", "comment": "Malware payload (Mirai)", "value": "6ed8e60b2a4920782fbdc9ce594fb089", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225376, "uuid": "78819657-f192-429c-8b6d-69b2ceca360e", "comment": "Malware payload (Mirai)", "value": "6f44e4ead7e3c7684baa14cae3d4401cc65e251caebe8cccb6571493abe5ea22", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225376, "uuid": "6e4d98e1-cfd8-441a-8841-645fa6384881", "value": "T18ED308C7F900D9FAF80AE3374853080AB230B7A649525A377257357FED7A1990477E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225376, "uuid": "e5af63c1-8485-406a-b7c6-7fe3cd846e7e", "value": "3072:tIW4mq3PrmMIyLLvTvsyw2j9ho8s7ORV1jbixLX+XKDP:lxyLzjsd24H7OwLX+4P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776225376, "uuid": "7b62f8ca-69cd-4d92-b6de-1b86bbf0fdef", "value": 140064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225376, "uuid": "61263b8f-8b48-4bae-8678-70941bdeb43c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0dd1a8b2-387f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776225376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225376, "uuid": "a0bb85e6-34e1-4b62-8846-ac3a795f769c", "comment": "Malware payload (Mirai)", "value": "5ae3e819b506b50f337829c71e4445de", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225376, "uuid": "f41d3fae-ae06-4846-914d-1fb57d631b0f", "comment": "Malware payload (Mirai)", "value": "a8753b7732ece2bb221a7305a86266a20bec95224927d43e7b87f8f1e4ad7a9b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225376, "uuid": "19b4fcf4-01c5-45f2-be73-10ba65116679", "value": "T124C39CABB24F1050C42647F51BCB5B9C2E2324019E2B9AE77C6E373E2B365DE58063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225376, "uuid": "6f22539b-f74e-476f-8481-918ab9b37bcb", "value": "3072:i/oB12LNEBITJPScwKJSIqgI85glCzfQffHXDqz:i/+1FBIxS5b7gVCCzfQfbqz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776225376, "uuid": "dd38565f-d955-4bda-8826-dd11d67a470b", "value": 124344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225376, "uuid": "752cf198-90b7-4db8-8a9f-3686c0d7f918", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e7276c5-387f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776225377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225377, "uuid": "6636052b-d929-476c-9b61-58f48dafe4aa", "comment": "Malware payload (Mirai)", "value": "31c260fb7af348627cf67c5c7454decf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225377, "uuid": "f7315f59-e434-4dbb-a1d0-f03d39def99b", "comment": "Malware payload (Mirai)", "value": "c5ad3240e99a6e1f61c2938353dc46cecf742a5fb78f4ff685cd5eca75941178", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225377, "uuid": "3d4bec5e-982e-4fc7-b0d5-840000a3ee97", "value": "T14DE3C81A9FA10EBBDC6FDD3702A9064235CC954712A43B7A3674D538F64E90F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225377, "uuid": "c42c68ae-9aaa-470e-b444-09efecea1dbb", "value": "3072:WBE+rwbBgJNrzKk83R5SXa3F0kVBbJnC7:WBxrwGN9832c0Wbg7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776225377, "uuid": "6b3f6ce6-1a49-43ec-aba9-59c109132942", "value": 156720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225377, "uuid": "9709441c-51b7-4597-ae9a-3fd9f320a8ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0edd71bc-387f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776225378, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225378, "uuid": "17fdf31a-54a8-43da-952f-0b37d0d2bf1b", "comment": "Malware payload (Mirai)", "value": "5270bb5509ac4d3436c4d368cff6244a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225378, "uuid": "836472d6-9823-46f5-9262-a875d4453023", "comment": "Malware payload (Mirai)", "value": "62d025681389bd4860c1c7bec3eb60072a8da7c35fdaf743b51b35c484172279", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225378, "uuid": "a47f7c21-87cf-4485-a9a6-ccb99d68745e", "value": "T1C523F1A7C42FE92ED83CDDB40A5385D9AA636B8BA2C302473DDD58C978577D43920E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225378, "uuid": "f7c397b8-2363-4f92-8a02-5afe4b18a43d", "value": "768:SSzEW+AYjn9/JP5Hz/V25GLD4nsYwlihu7NoRGZaS1yvsWdIZkyn3pv4i:SoE79p5HeyD4glisORG0S0vs7x/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776225378, "uuid": "b79cc7cd-d3ec-4155-848b-1318812d88ad", "value": 47696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225378, "uuid": "5ef00c4a-83eb-418b-8e89-ff81f78cd280", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ee4bfc9-387f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776225378, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225378, "uuid": "16d33f01-bb92-406a-9a22-0983b9095f41", "comment": "Malware payload (Mirai)", "value": "7b2a845fb4271fa7f8302d9adb7d39ed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225378, "uuid": "06b071c1-4736-4b70-9614-a7fe2d4b5807", "comment": "Malware payload (Mirai)", "value": "7386d3cb4d2cea147b9c99a97f8184c0224745e65cf4ba96ad1c20ea1b1fcde2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225378, "uuid": "9f8ca515-f1ac-4458-b225-26b1e02b2e4b", "value": "T185332B48F783E0F0ED4A0571115BF77E96349E035124DE6EDBD4FE72AE32A12A12B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225378, "uuid": "8e838c18-8548-4f79-aaf6-ed9ef467523b", "value": "768:DZAAq1qT+C5GcbizpRrnVXfUEAFeFHIruziqANOV+U2331gkLrGfRTgqDl2pZTEr:DSfyep3hFHh+U431gkLrG9HUSr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776225378, "uuid": "82c6236a-a0a2-4d7f-a321-21b02ca99a8a", "value": 50476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225378, "uuid": "cf5d2d45-16fa-440b-a133-22bf84e7ed93", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f924f37-387f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776225379, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225379, "uuid": "54440c5d-bf81-44f6-b206-3b542b6bd7cb", "comment": "Malware payload (Mirai)", "value": "34dbfeb0b6a8d0ba430644d4b5da63e1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225379, "uuid": "4e62fa3f-d344-408b-8baa-49a4b6f5dfcd", "comment": "Malware payload (Mirai)", "value": "d7f5d644f1ec37156bfcbc04491ec09eb895a190f8253b3fcf98edf16edff6c5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225379, "uuid": "8ffea2dd-53b9-4362-afb0-7d23a67a456e", "value": "T135E3881A6E328FAEF67C833147B74A24A75D23D623E1D684D2ADC1145F2028E545FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225379, "uuid": "e95809f9-3e8f-48d0-b070-c3456b6fff0c", "value": "1536:fFff+Q5rzEwvJ2sjaj9ffNlOyOGLVew355cgNFQuYTNDg3+RxdoWflS:fFvEY2sjaj9fFlOyOGLL5c6SgORxdblS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776225379, "uuid": "7124a21d-f93c-4900-ab94-2bd6b72857ed", "value": 156720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225379, "uuid": "227f12dc-a736-41c6-a017-7b61cad51baf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "101b69b3-387f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776225380, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225380, "uuid": "2850094e-7624-4091-b4b6-6e020c45976b", "comment": "Malware payload (Mirai)", "value": "972851517990e9c47282dc945e450462", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225380, "uuid": "b3ae7662-b628-4e12-a932-3a0a51f76fc2", "comment": "Malware payload (Mirai)", "value": "610a903fbd31c8d44b1d895d0ca02e866d971f95b238277fab629bd34e268159", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225380, "uuid": "ed2e7867-c57f-4362-be3c-38627433a6c8", "value": "T14042D50B57FABE07C1D0E37301E3072266EA4F656124472F7E192C995E9934B2D3AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225380, "uuid": "c1bab53f-c780-4c40-a3ee-da3c59ed7a04", "value": "192:dmLjGr1/WTohTAjo7usPuEfHsCi0UZNDstqYM1Dq3cjeZ:AuaauDEfMC7Uphq3d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776225380, "uuid": "9b0de6c9-29fa-4dd3-874e-5c3e1fecd98c", "value": 12292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225380, "uuid": "5c5d7238-892d-4891-827b-5c7f2a3e8025", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11588ca8-387f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776225382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225382, "uuid": "9453ae29-8c4d-4526-98bd-2644976ad694", "comment": "Malware payload (Mirai)", "value": "49e7b63f7c6d09fcff11b01e6c94e5d9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225382, "uuid": "80df82a0-9f57-4f75-972c-8621a7a388d1", "comment": "Malware payload (Mirai)", "value": "e6bea3f7b04f15f833770d089446843d932d9ddde988ff850d271085f3ab21a3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225382, "uuid": "142b780f-4ebe-4924-9a2c-bd3dee483532", "value": "T14CC32A06B30C0947E1633EF43B3B27E1D3DFDA8121A4F640655FAA8991B2D32558AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225382, "uuid": "47a2c7f0-d0f8-4cc4-8212-fe0bfd5bc250", "value": "1536:dyd65mdLLhJxDxI+bYqKA2OGxIkEcbI/MvAeJuOARGaJH8QqMibsIo:dYS6LhJx2FrOGWkIpeCi3o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776225382, "uuid": "4ec4ad98-e18f-455b-b9f5-52de673775f3", "value": 121508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225382, "uuid": "b5384ff8-d5f0-4488-9727-a105bc735ee1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13ba2727-387f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776225386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225386, "uuid": "dcd6ecd8-bc6d-41ba-a29c-c68032bd3c47", "comment": "Malware payload (Mirai)", "value": "2ceb5f72c86a60d2b0a7576e97bdeb07", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225386, "uuid": "e676c9af-8ed4-4cd3-ad0c-35a6c38037b6", "comment": "Malware payload (Mirai)", "value": "858944162e6e16f2f042a7bb8f1030721104ffbbff2b7fd94ef5b3247c476db7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225386, "uuid": "c0eae6b8-77f9-4057-b10d-ed40d1076cf4", "value": "T1E9C30946F8819B15D5C151BAFF0E124E77231B3CE2DE73029D24AB747B8A8BB0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225386, "uuid": "fc400724-5241-4fd4-ad98-a2cbf3c799ad", "value": "3072:paUJUwTHv6X6BltjHakuJyqxuWfmscpLdJNT:paUJPz6Xilt7a8FWfmdLdjT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776225386, "uuid": "a2e42d5f-3ba8-42e4-8bdd-ee26008d05d4", "value": 129244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225386, "uuid": "34028d45-6486-4a1c-afd8-23ac318760e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "551a8f3b-387f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776225496, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225496, "uuid": "a1beb2fd-68c1-43ab-b914-4ae5ac1efe2d", "comment": "Malware payload (Mirai)", "value": "d1891d8b0ce656c66ab86f3d25954451", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225496, "uuid": "27a18bbe-e679-4da5-af6f-ee02cc2ee796", "comment": "Malware payload (Mirai)", "value": "11fff7d4c7e60460c9f27211964df7dca64b318fec736298cac7342fefe464ef", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225496, "uuid": "d2637d04-4700-4504-984f-f066c5f78f97", "value": "T17041878947F4238EF1C48E07FC998D756196A4A016BC5A00E0740DF2E3BF887B6F55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225496, "uuid": "00022354-596a-4055-b175-dfc0c394439f", "value": "24:fvpbEGELH2kEkECv+cE6mfvvVE36v+cE6F1RFvgRTgRBEgR/zgRiIvW4WKEWkWZm:RXIH7ytnB1A+rbdUteO0lZ1o9H0fmI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776225496, "uuid": "1c2af45d-0484-4068-b9a8-7981cec9f6af", "value": 2160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225496, "uuid": "d324edca-7605-42f1-95eb-58278772792b", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "992e4d22-387f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776225610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225610, "uuid": "fd3b3e99-459b-42a5-b187-b7ea12b73f09", "comment": "Malware payload (Mirai)", "value": "61bac5e9c81e612406ee2e2068a45950", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225610, "uuid": "0a47b2cb-0b5e-40b0-b32b-fe9e7a81280b", "comment": "Malware payload (Mirai)", "value": "a19a7718acaef1a64c08dc90c3e59d5685b81c3e12ac0811dc0af44cae86cd70", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225610, "uuid": "b4529f49-b1fb-40a9-8e92-7ae252af925c", "value": "T1C6F33969BA0F6C41F2C2C3F8DA8C87E13E1735E3C6778DA1790152EDDBA39D959809", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225610, "uuid": "5000680f-f864-400f-912f-b1bd25cdbc83", "value": "1536:WZp34PkF4G/2r07HYXh5B8yOlz29b1X75J1+l50VyBIRM47En5p5M/LW:i3AB8yAMR7P1+/0Vy+RM47xq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776225610, "uuid": "4324a519-97ed-4523-8bc7-9f5f793f1d34", "value": 157544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225610, "uuid": "2e99f629-9a50-4e29-be3b-767d0b31da0d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f145d050-3882-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776227046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776227046, "uuid": "ad6690b0-ed2f-4eb8-b1c2-9d32e03420d2", "comment": "Malware payload", "value": "3b0fed2234eff799cdb7e61eb3e85521", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776227046, "uuid": "b767afe9-6583-418c-8678-755f1a31f1c0", "comment": "Malware payload", "value": "2f06843f15ce9d9b4eb2588fe8f4151ba139f9cdbd7817c094c96a8ae11c0291", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776227046, "uuid": "cfe27e80-c8c1-43d9-9e93-dfb99cbce600", "value": "T1DF82C072A271EB2EB67F1B50012C8370F3679874CBB1AA53114B4BB5E76C2E23546A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776227046, "uuid": "95b49df7-ff32-43f2-9017-151810a6f112", "value": "384:94SCqBnQYCdhuKCvralS6BHZT61UH0peYIDSwEKWazlBSB6YJOyBVSoC:CYCOKWralOadYIbE7azvSAaLkd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776227046, "uuid": "23949551-a789-4610-802f-acd06e49ee30", "value": 18688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776227046, "uuid": "b1a9bb37-cc91-40c1-a65e-67b1e7ddf54f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fab326e5-3882-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776227062, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776227062, "uuid": "93daa78d-af43-4879-8f07-34b850eab4e9", "comment": "Malware payload", "value": "627c63291cbf13e0e259e80f87e3af9a", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776227062, "uuid": "144fc73c-8ed2-477d-990c-f66965694fdd", "comment": "Malware payload", "value": "d75b422c05e53ed346bc8e8583f9c3df70c66b0ffde38deea94fa34fae63ee0a", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776227062, "uuid": "9e485342-7f8c-40a3-87a3-846968845881", "value": "T1DC82D09A4BD0953BE126A097B3312920E7EDFF1FB08AA9025550E72240C1735E7FEA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776227062, "uuid": "cf4f107a-5d48-4923-afb2-f0c2e81d6d0d", "value": "384:W54cTkvvH6tIjvxgxDKjC07x1Xe/IBmiLiQOpMKgcKa61O:W54cTSxbh1MYLtOqw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776227062, "uuid": "937175ae-be9c-4f49-9187-06285610267f", "value": 18688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776227062, "uuid": "cd04a5a0-3ed5-430b-a13c-8ab932a1d776", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62500ca3-3883-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776227236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776227236, "uuid": "711aca7d-540f-4478-a80f-3827c40b1b39", "comment": "Malware payload", "value": "0fff3ccfd00b657b0b40305d2dda4476", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776227236, "uuid": "5d75c624-4b44-487e-ab64-3316ffc41564", "comment": "Malware payload", "value": "055f8501d26659258032e3ba73deac8cc1209d5edfd4a82a14603a2d77446a96", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776227236, "uuid": "8e1236ed-ca18-4bd1-8ef5-ac5e310111f5", "value": "T1D293E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA523895F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776227236, "uuid": "7436c5a6-a759-42be-a082-0a5440d54c1c", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXCIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776227236, "uuid": "2f20a06e-04fa-4844-aae1-966819bb3da7", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776227236, "uuid": "d5355187-cebd-43f9-a834-3b5e05ce63a8", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7131bd9c-3885-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776228120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776228120, "uuid": "ef7ae5e9-34f4-4198-b0fa-85be97b2dd90", "comment": "Malware payload", "value": "70518a76edd5007af71dc1380e8ccd22", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776228120, "uuid": "7d8bc361-c948-4cc5-9855-560248bf5d98", "comment": "Malware payload", "value": "1a40d2be5ebdaa6d4b135e56541d7240edc30512cf75e692c843c0c0fbbaa621", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776228120, "uuid": "40b469fd-11a0-44e5-9744-5b3f92c18233", "value": "T13082D169A773BA53293115C35F74920DEE0DF73824729F97AC20EE072CAC96680653", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776228120, "uuid": "65cfc7b4-ca1e-4ec0-9812-5adf4a703ced", "value": "384:wGitjNfElEcJf/PVx1y5uJmvwnyeJl2Q0YY4WmHrQ9qG0mfXOTU2e0O:wGEelEefHvIoYEyAl2QW4VEwG0mfSMV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776228120, "uuid": "3b5aa646-5697-4921-b448-53d8f4b411c0", "value": 18688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776228120, "uuid": "eca02e5c-6fa5-4881-b656-37c5b2eb4b43", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f24211d7-3885-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776228337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776228337, "uuid": "6a65b786-5858-42dd-acdf-d531dedea138", "comment": "Malware payload", "value": "3d5713714832d58fe2893097e10167bf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776228337, "uuid": "9df2fc77-10c1-4811-ac4f-b42e5d4052c5", "comment": "Malware payload", "value": "b7c1b2fb760a07133ae487f3134b4973f7cbcfad36e394a71eaa9d5f2eeb2c77", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776228337, "uuid": "4e37a27e-9a03-4389-bc8e-88d1eabef0b2", "value": "T122931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776228337, "uuid": "399019a2-c4fd-44c1-8356-bfe035f57f63", "value": "1536:nByp1tF/uwMmAIa14oXoKIMepeV7tb73WdxCrCitkb5fv2v05xLkrJK80sCxKXoh:n8iIL0GitkbFv2v05xLkr90sCxwoIy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776228337, "uuid": "e79e5dae-124f-4cc5-b26d-f38375d6d02b", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776228337, "uuid": "be6ee31d-7f59-4d3e-a236-0842e5771ea7", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ede2b7ef-388a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776230477, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776230477, "uuid": "a8586313-77ae-4dfd-b475-92f753ff7e53", "comment": "Malware payload", "value": "324e68133edf3024a7ef8477a4b68727", "object_relation": "md5", "Tag": [ { "name": "160-119-69-4", "colour": "#946e7d", "exportable": true, "hide_tag": false }, { "name": "45-95-147-178", "colour": "#a61377", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776230477, "uuid": "3437bfdb-223f-4ea1-a401-18db06ce0b06", "comment": "Malware payload", "value": "2e59bb0360026814051d867f70f9aa801fb88f7da755a5461aa753d94cb55536", "object_relation": "sha256", "Tag": [ { "name": "160-119-69-4", "colour": "#946e7d", "exportable": true, "hide_tag": false }, { "name": "45-95-147-178", "colour": "#a61377", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776230477, "uuid": "47c55fe8-88c2-41b0-ae1f-7877874b09f3", "value": "T16CA2EFF1F8ECA43636DD843ABB9CA805A9CF7C2F4DAB7D2014575928411C75EA019B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776230477, "uuid": "634e0912-df37-46ba-a47d-1dce81b31a70", "value": "384:bVc3s13isjsKG6qkSgjkjV/A4UAcGE3JNRhQuW5Q:QsyUMkSgjkjVdUAcd3JN3N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776230477, "uuid": "908e7f05-0973-45e3-a658-230bb9b03f5c", "value": 23096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776230477, "uuid": "ae7d74ed-8566-4916-bb58-29781bbd7029", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48f68530-388c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776231059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776231059, "uuid": "9c5a3140-db96-40dc-9c6c-8d24d4d164e7", "comment": "Malware payload", "value": "e90332d6e29c215253dc8c7bb4bf78c4", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776231059, "uuid": "ee405094-423b-47c0-9da6-cb2c3b7690cf", "comment": "Malware payload", "value": "d22f156fc7d6bef6e4fb91a47d6eec51818442af2ccfdbcc85cd2be83a4d292c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776231059, "uuid": "1ba11da5-ef4b-4f0d-be78-c00c78b9c702", "value": "T1D485339CA6BBD721FE9FAF4B108AE20316C0788FA26C7F1D153616654CA61DC9427D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776231059, "uuid": "a1aeeae0-7e1a-4942-854d-7da237057832", "value": "49152:S+kPCWmFORuaxAm/nXJDdUnZCOpKiGu66RGlkslR4:YCWNTxAmPJ+g69GDuU+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776231059, "uuid": "fd0d6cf6-6853-4d82-b5d2-c6923f415a59", "value": 1721989, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776231059, "uuid": "3c414046-7520-4ae9-8cce-72c2d1e8742d", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d357274-389b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776237428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237428, "uuid": "1f6c2147-83b5-44ee-a20a-18b10b3cbded", "comment": "Malware payload", "value": "bdef87de5929a5e5ea0ca4fbde584f63", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237428, "uuid": "f210ebc6-6d9a-4073-a74e-4b5332ec33e5", "comment": "Malware payload", "value": "390ca378978bedc3f71db8f79c294afd1da652117297729d2dd946eb9e6b6825", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237428, "uuid": "68df0dcd-647d-4e50-842d-856919ee196b", "value": "T1F5146C19BA5540FAE26B8538C9521D05FB737C4647A0AACF47900AF69F237E0EE3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237428, "uuid": "cf3bf669-0726-4cda-b94a-c17c1a4ef322", "value": "6b2cae8aa855bea0054b484f646ff01e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237428, "uuid": "df517a94-b2b6-47e7-8d36-1201f6d9c9a5", "value": "3072:nCAjPxdo9Ka04Vz83Yf6fci4kz7/hObAFgiEn:nCA1doMaxVAIS9QbAz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776237428, "uuid": "9f0b0335-3a44-4163-bae9-480dde20194c", "value": 194048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237428, "uuid": "5265d9d6-208b-42e5-8fc4-2a25db33b465", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d55dcc7-389b-11f1-bc00-82aee05be84a", "comment": "Malware payload (SalatStealer)", "timestamp": 1776237428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237428, "uuid": "ce9a98cc-795a-4e4c-9746-1e9c33a50333", "comment": "Malware payload (SalatStealer)", "value": "01b7d5fffb651c50cce6e8678ca7ffe8", "object_relation": "md5", "Tag": [ { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237428, "uuid": "48a2400b-52c6-4945-8078-5b437e6bdd05", "comment": "Malware payload (SalatStealer)", "value": "104a6e20357893b7b18baf722e6828c4a874137a0034435f078100ab65c21bef", "object_relation": "sha256", "Tag": [ { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237428, "uuid": "1bec2f7a-839c-4ca0-947f-5df5cd7bdfa4", "value": "T1B0F53315102D2CB7DE5A74B0AB3D309761A62CC557EFB64B41FC9274FB878AC9093E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237428, "uuid": "2cd237e8-b6b8-45f0-a700-56aa441c5e57", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237428, "uuid": "f1cbe2bc-d481-4ad9-9996-c060cea97c31", "value": "98304:KZpouXq6TmBi9vpVIFjqkka/O47REQ36ZpKZbCjdskTIk:Kj9TGi9vp2KKRLQMpYYk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776237428, "uuid": "a2fdd621-4c57-4913-850d-49e11ea188ac", "value": 3546112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237428, "uuid": "2f14f67c-c7a3-4bec-b1ed-c579ec1e624f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d6ea9a9-389b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776237429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237429, "uuid": "eaf11439-b514-4155-bd3b-b39280b16d83", "comment": "Malware payload", "value": "debb76e35f6927a81930fadf1cf6c438", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237429, "uuid": "1c3ebfd2-a5b3-4451-82a7-bce69d8c27b8", "comment": "Malware payload", "value": "497f281f86324aa4173e8118b7f3d8a5b8e9b3b91abb7f929594ad6c7ee5bf43", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "bc787cf7-926d-4eaa-94e5-9dbd93dde0b0", "value": "T17F348D19B6A50CF9ED7B853DC9434906DB72BC560760DACF07A00A965F23BE09E3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "aeaffca2-6b3c-424e-85aa-f09363234d23", "value": "0a603a0d92828675d5aa8410b6299dc4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "8afaa67a-3d0f-432c-84c3-3c61b22cb63b", "value": "3072:24TOwFEJJzmQ+6zI3qqjpYwCPXG6CZpiaDxGJMQo9CklHvUXz/cTwS:fTbFEJJSQ+MIaq0vG6ciaitklvkS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776237429, "uuid": "6879e463-62a7-4141-8ca0-e03709e2aeff", "value": 246272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "2c3f614e-7a30-403b-a01f-af04ae4bb820", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d704a9f-389b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776237429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237429, "uuid": "945e338d-ef73-4eb6-8b7a-3574c365f075", "comment": "Malware payload", "value": "9fd5d7ee6b40fe6c5ff3ffa0e6868b41", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237429, "uuid": "afe22396-ddfb-478b-aa4b-99e2756aa18c", "comment": "Malware payload", "value": "00d47af5c6bcaae108c2fc0c55d5a0b992e9cfa3e6cecfc3372e2bc6631b67d8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "fe240a11-992d-4e9a-b2fb-b368773132b6", "value": "T1CAE423E3D2FA52F5FB91949C69A0CF3CFE95704EA515834B2388CF815D02F22AB253", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "2b432e5f-92ef-41f5-a41d-54c55c1b4fff", "value": "12288:gWbP+OgyGtAvia01aJPVsbpQofpKtJAcGrS/l/bV0LbcM66Yu7wwi4m6JB:Jqx4ijGP4QoBKfwA5Yb5rFlZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776237429, "uuid": "038bd2d0-1420-444a-845e-7d4a88f5dea0", "value": 685643, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "eb3ecc9d-0400-4a68-a02e-a8dde7579ff4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d785141-389b-11f1-bc00-82aee05be84a", "comment": "Malware payload (SalatStealer)", "timestamp": 1776237429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237429, "uuid": "f72bbdf2-d504-4796-a93c-352e9dbf0c3b", "comment": "Malware payload (SalatStealer)", "value": "6209ed6ec107470063ffe875118d58ff", "object_relation": "md5", "Tag": [ { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237429, "uuid": "15f2973d-3802-4674-b9e3-4b7288120c35", "comment": "Malware payload (SalatStealer)", "value": "daa3cb621436511323bc6c7e8a0d5d3b06244874d0dc6876285560dd17ba94f3", "object_relation": "sha256", "Tag": [ { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "bd480481-504b-4b81-a2c6-a5ee9750929d", "value": "T1F9F53373CEA5B182F5D171FDFF6BB102BC63E1C589228D81C5B4160A86FC14DE9628", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "3cce9792-2356-402d-be84-92700608bb62", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "1f3d602c-b67f-467a-98e3-7375d7654af3", "value": "49152:QM+J7/4PVYoySkRn60moZfjDjl8bJxZsftEbFbBObGS2kLMaoupzKhXnD/41Np:L+JEN3V0/fTilxOfCZgSBkLPonhXn81", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776237429, "uuid": "0e13a1f7-aac5-4b15-8b7c-66735f9a0159", "value": 3545600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "5cf9a90a-5db1-4ccc-9356-b236be8d66f8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d7f8ef1-389b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776237429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237429, "uuid": "32eba70b-7029-4616-b6ba-7df3affc43b6", "comment": "Malware payload", "value": "4394f29c96b8ada4d9dfc8b277552711", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237429, "uuid": "84010b63-3152-47dd-b2e8-1183fa301061", "comment": "Malware payload", "value": "9e7496aed92bfe0db8a507320766eda78e268f0a7650449501fda4bab7e2fda0", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "7e1fa47f-26d0-4f5b-b4ea-f9972806711d", "value": "T11E44132AB2B241EFD6B270DF5C64B717FE903A4E15217A4BD716D2C01E52A353B0C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "645341fd-a59a-4d7a-b03c-53ab45f6f1d3", "value": "6144:AHrTIP2FKyVfeUtPoDcEfPrQIEWHGVtjPvNatxqm6ysB:eQywCEfPcXtjPLm6JB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776237429, "uuid": "1b219b68-0843-469d-b48d-9a38fe78f3b6", "value": 264267, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "bde3bd3b-0572-447c-ae18-bba9cdc2d917", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1dc04c44-389b-11f1-bc00-82aee05be84a", "comment": "Malware payload (SalatStealer)", "timestamp": 1776237429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237429, "uuid": "154146c0-59a8-445f-863d-2afd4e0dac49", "comment": "Malware payload (SalatStealer)", "value": "ced048238c36e7a7db0a40c6b5896c72", "object_relation": "md5", "Tag": [ { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237429, "uuid": "ce93ac7e-b190-4541-ae2e-a6b4eb2157af", "comment": "Malware payload (SalatStealer)", "value": "8dbfee40c640c8b38a30623029cc4a23e332bb94c56be2e349001f2f6f8bf845", "object_relation": "sha256", "Tag": [ { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "57b7c03a-de9e-45ea-abb0-c8f81099c459", "value": "T142F5330D04AD03D1F2E54F37E5671B06E1DDA33AA7A9A4FF695986440F0CB9818BE0", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "b7bd59bd-bca1-4205-9a6c-c3c877087fa5", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "44540ecc-9e01-4da9-be26-c4e05a880a3b", "value": "98304:tJ4KWfVI+OPqfTG0RgAM34t4Hg8O/mkBDbMsMR:tqfI+fTZgP34Ubki", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776237429, "uuid": "7dcdeb16-c2eb-488f-8b26-fcdf356714cf", "value": 3593728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "673e14bc-4843-4ff7-b7aa-90242001a719", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1dc840e8-389b-11f1-bc00-82aee05be84a", "comment": "Malware payload (SalatStealer)", "timestamp": 1776237429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237429, "uuid": "805a1f41-f278-41a7-9b61-b2deeedf11b1", "comment": "Malware payload (SalatStealer)", "value": "99a6f319c29144cfecf4381cd5a8434d", "object_relation": "md5", "Tag": [ { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237429, "uuid": "c12d9e9e-6f06-4887-970d-b34ef7200ee5", "comment": "Malware payload (SalatStealer)", "value": "9fa36e7d05d56fe84552e57b82e8bd87f882c10ff9126d154d066a5fddf39583", "object_relation": "sha256", "Tag": [ { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "d1158ea6-23a2-40ba-b582-85b40cf82d1a", "value": "T1A0F533584E4237E5D40CB6FE969B93BC3E5E6C94BB89C93269AC230EFB5D48C0D0E4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "25501a28-0d0c-4be8-9121-fe0a270e041f", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "b1e4d16f-e84d-4721-8546-b6f04a38ef29", "value": "49152:zsZr11hyQ+Y0VIfU7PN/rcynNGCCRBSxQFdCGEd7IOaWpmBHKUnowOX1i81MVuob:zgtr+5IfEN/rBNGCVy/NKUowOXcTx+p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776237429, "uuid": "6b76fa05-2e75-4633-8424-4620829db54f", "value": 3545600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "022f1d98-b365-48df-888f-02d54b963c58", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1dc8a8cb-389b-11f1-bc00-82aee05be84a", "comment": "Malware payload (SalatStealer)", "timestamp": 1776237429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237429, "uuid": "e036fb15-1ff4-4d71-a686-5137c8688da2", "comment": "Malware payload (SalatStealer)", "value": "5f0fd5c652695c203259b1c5e49cdf5c", "object_relation": "md5", "Tag": [ { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237429, "uuid": "65aff2a2-fba8-49c5-a9c5-58b8fb7993d5", "comment": "Malware payload (SalatStealer)", "value": "69decd7906f215fb3f05f332fd6293715adf9ae7b0e88ff0bed77428a64e7b22", "object_relation": "sha256", "Tag": [ { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "5c910d4d-a0a0-4370-babc-819b40ad082a", "value": "T133F533247745472ADD4C7530FE6B6508BE8ACE07A6FD4EDB80F5B4F86821B28325D2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "c9a89376-46e8-4d06-8dd6-19dfd28efcf7", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "f54ddacd-d962-4338-91b3-0bdfde0b8735", "value": "98304:6fhFPwYPAaSPcp8WicbVOqZJg1NTQSuf7JH5wn4:6fhFNP9LlhZK81H5w4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776237429, "uuid": "393e70d0-50aa-466d-a0fa-c1d3068b1a8a", "value": 3547136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237429, "uuid": "1ef71ed5-126c-4920-ac75-68b8d1942a78", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f1e87cf-389b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776237485, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237485, "uuid": "fa708645-71b5-4b2a-a9eb-4553996a0d89", "comment": "Malware payload", "value": "1f8a79e41e3b9dffad1be8235af93203", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237485, "uuid": "17a2fe05-ab94-4b9d-a920-f9055b025ad8", "comment": "Malware payload", "value": "4e25125a07c9a3a40afb20551a55986e6acffbeea3637e1d8ed09cdd6220649e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237485, "uuid": "e039cbcd-1eec-4a26-8747-ea255c61367f", "value": "T14A441222D3629198F933514D65E5B23EEFB2314E5C248ECB73254A42B627D20736CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237485, "uuid": "9d038dbb-9e01-49bd-b77c-6f80f176eceb", "value": "6144:y4XVaRuPZOMKN7zKlQll4NJwcay/O0c8cR1e4qm6ysB:yQMRuPju6QlyNJwcay200R1wm6JB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776237485, "uuid": "a8174104-8ca6-40d7-b925-008e063f2cc6", "value": 267339, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237485, "uuid": "c3867a16-ffff-4f55-a749-6abfa8d33045", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2ee9238-37ce-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776239468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776239468, "uuid": "c04a76a6-602f-40e0-85ae-0599936d7744", "comment": "Malware payload", "value": "5e04450cbab6235164e554c0e1f898ba", "object_relation": "md5", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776239468, "uuid": "0836ba33-c5f5-4297-9c11-fd75df2757d9", "comment": "Malware payload", "value": "56950b679ea0083db700f65e31fad12d29c000849e80ae2903d131a496ee777c", "object_relation": "sha256", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776239468, "uuid": "6be294e3-1205-4975-9134-a3b3e1345862", "value": "T124D57DDD1945A5E2C3FBB760C5B53E1E26B073336C67591AB2FCA1D9CA502A66C83F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776239468, "uuid": "2ef8cbc3-9064-4028-b56d-0424879f906b", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cGXPIUKoVXOGY6t:8UixbItdTrJoFVPMvXGXwEVw0jz7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776239468, "uuid": "3b7f0817-38b5-4ca7-ace3-156bb6397ec3", "value": 2935633, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776239468, "uuid": "caa866bc-dffc-4d20-8617-6e01dd0c091d", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9078cce6-38a0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776239769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776239769, "uuid": "d054e257-6817-49a3-bbb9-7622d2c7019a", "comment": "Malware payload", "value": "d994a907063d074b446c04504c879103", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776239769, "uuid": "fe8ac96e-f374-4a5e-b867-8d36cfb7fbae", "comment": "Malware payload", "value": "3722a3c25c19877c391c37af43f6daa75528a1291289e24b10ac26494223066e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776239769, "uuid": "aa2a7ed5-cdfc-4616-8d64-2441cfb0a42b", "value": "T100A537E288B0FF17B7661D1873745E691018153B0FDB0209B8BEDBC67683DAA346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776239769, "uuid": "3782bc2d-b97d-4ca5-a6cb-0d36dbeaf54e", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFT1:m0eF4xaDjDONijDG8ZxFT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776239769, "uuid": "bab98800-6ad3-4fe4-aee8-e6c93bf06dc0", "value": 2152204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776239769, "uuid": "91458dad-89ef-4835-af96-68225eccfd69", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "886557d1-38a2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Loda)", "timestamp": 1776240614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776240614, "uuid": "4b225795-edfe-4b53-a55c-55dfb4065d2d", "comment": "Malware payload (Loda)", "value": "6a0260afff0fea4d35c5872e71250c72", "object_relation": "md5", "Tag": [ { "name": "Loda", "colour": "#58eac9", "exportable": true, "hide_tag": false }, { "name": "LodaRAT", "colour": "#9499f9", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776240614, "uuid": "b070bfaa-9d58-48f0-825a-96273dc8289b", "comment": "Malware payload (Loda)", "value": "9f0fe7144eabf6f7c421b594ba15f5f302f8983a73b85598e13af528ee6dcab3", "object_relation": "sha256", "Tag": [ { "name": "Loda", "colour": "#58eac9", "exportable": true, "hide_tag": false }, { "name": "LodaRAT", "colour": "#9499f9", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776240614, "uuid": "35ba4215-10e6-488b-8c6d-d0e6254f9844", "value": "T17AC6339D3E8680EBE8C11474A72B9FD323F36DA516C58D3139C5744A71B3F76302A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776240614, "uuid": "ce75fe9c-7e97-44c8-b4a6-cbc2c2a1837b", "value": "196608:HL19Tn+tr8gW53n1K5h+ZWNxZsvNkP+7qZ8yW9EaK+vsDAnC+2F64fN:H59Tnod6nA5/NDcNkP+7qmZ9EyvsP5fN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776240614, "uuid": "f8ee564c-9add-4bc8-9491-7c008fdd095e", "value": 11603968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776240614, "uuid": "95ea634c-6ad7-4f21-8aa4-be37b2a50e88", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b1cad1f-38a2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Loda)", "timestamp": 1776240619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776240619, "uuid": "9cb35437-54e0-4def-a2b9-c23b43ab3dc6", "comment": "Malware payload (Loda)", "value": "2f757ea777b6fe9f96b1e19b2a1a68ce", "object_relation": "md5", "Tag": [ { "name": "Loda", "colour": "#58eac9", "exportable": true, "hide_tag": false }, { "name": "LodaRAT", "colour": "#9499f9", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776240619, "uuid": "56ee539e-6e68-43d1-9c40-e6296e0b36cd", "comment": "Malware payload (Loda)", "value": "2964a129748354c93fc560566d2b023095ec96c6772cbd23fb0f7958308f3058", "object_relation": "sha256", "Tag": [ { "name": "Loda", "colour": "#58eac9", "exportable": true, "hide_tag": false }, { "name": "LodaRAT", "colour": "#9499f9", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776240619, "uuid": "98fdf604-9f00-43a6-9576-bde2b29cfe2c", "value": "T11EC633DE2C8780EADEC109F08B0B7BE713F79DA558994C3D29863588B571EB3306B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776240619, "uuid": "5c64d2c3-4dfe-4e5f-be75-890cb2b1226d", "value": "196608:SIDwfCda30/E43d4xjVl8/Pg3VU5A9BwYnApS2dmBUsnpEYt73e:SI8fCdH3ixjVl8/Pg3VfgShBLn+Yt3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776240619, "uuid": "c55ccf61-884b-4d66-a71d-53a63ab41de0", "value": 11649024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776240619, "uuid": "485e4ff6-cac9-49b7-b64d-35bd90ccc3f0", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cdb9f752-38a2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776240731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776240731, "uuid": "881c6939-c89f-4de4-83cb-2fd60ff2bbe8", "comment": "Malware payload", "value": "f2921690c072cf32ab1adf99f8b91fe8", "object_relation": "md5", "Tag": [ { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776240731, "uuid": "77f30bc1-8961-437c-9a7a-5041df8ddb7b", "comment": "Malware payload", "value": "2aa8c37f3b240b06fffe6e26f7f08f2edaf7fe592645ed5294090c57a09b7446", "object_relation": "sha256", "Tag": [ { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776240731, "uuid": "e0aaf55d-908f-4abb-87be-d9595c51e065", "value": "T1037339733102BCDD2F7B0D84A61036640C9CB99FA35A854CBAC407FE65EB958DF6B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776240731, "uuid": "da79ffcf-4e57-4ca9-b1ae-0138b154da6e", "value": "768:0Yh+ZSw5trYCiQzKy7YO++FXCywAxjA6pByOGxaGG23juilU5dhAS3ZaIN2+TuVQ:0FTsCxKG++dCYFL29qNaINewn70n+L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776240731, "uuid": "be28d55b-fd87-4d3f-aca2-d32b047ee327", "value": 77144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776240731, "uuid": "3400972f-fd67-4ec1-8634-6192dea592e6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01438250-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776240817, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776240817, "uuid": "5ddbaa6b-95df-4c21-a70f-d009fad46ac8", "comment": "Malware payload", "value": "cab496c1b2c0be1ac722216d1d51a018", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776240817, "uuid": "d68db0b9-6ec1-4679-abc8-dfddd9c2f4c6", "comment": "Malware payload", "value": "48282c11c7ea279a6d36a4d804570c44b9e0591ac5a88ac871f87cd41493383c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776240817, "uuid": "5332af0d-4b69-431a-85d5-ee510f29a1d8", "value": "T1FE72F867824737A66C217A5B9BF52B4C111D90A3E403D948FBAF0E64CF9FB4039523", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776240817, "uuid": "00f576af-68be-41cc-b98b-318ab202207a", "value": "384:b4rXFxg6yloElI0bsDdAQkPOsJtUB6jygIaVOo:bOc6y6EtbiVrBY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776240817, "uuid": "3e2d9274-939c-4fd0-a8ce-c6d663f59f02", "value": 16507, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776240817, "uuid": "013332b2-fcee-489c-a391-515235ad4ca5", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f27da9f-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776241028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241028, "uuid": "16f954d8-db4e-4fb5-8285-2fdff3d733a7", "comment": "Malware payload", "value": "2770deccb5a73c0823046d6118092b5d", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241028, "uuid": "860928c0-cbbc-4f34-8410-8ce40a41f9ea", "comment": "Malware payload", "value": "2b3804386a1c75b9fce55c8e56093977d5fa20e99e6dc3b79eb961ce9d34ba1c", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241028, "uuid": "9019da0c-8925-453c-b818-c64d8426916d", "value": "T1056474FA6036ED8A87370A40E1043F179C299E9F66B887F8778815D1C19C68C9DE75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241028, "uuid": "c6b1a43a-6259-40ca-befc-32e5105b4a6c", "value": "6144:CJ+V9XovhjjLaDqSU3XfdyfdvDr3yU+qpH:CWovgqSNr3x+4H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241028, "uuid": "f0a2fc6b-ce58-495e-a2db-ac266b150578", "value": 320214, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241028, "uuid": "e9f44ece-b074-4b50-a3f6-0b18f824a493", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5e36838-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776241147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241147, "uuid": "fd722fcb-bfc7-4d0d-8ce7-96da4fbceeca", "comment": "Malware payload", "value": "d0e003ea67f1517279f57c38d7d642d1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241147, "uuid": "855b70d5-e756-45fc-9d78-a84f74412246", "comment": "Malware payload", "value": "4118e394e1815f543b2ad7301d5f5b2fd3da6ad3d6d8bdd09e213e0fb38049a9", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241147, "uuid": "def89c1f-5d09-4e57-b3b5-75fc687264d6", "value": "T14C2412DDF6040B498D336857AB2F9694E405B34EF1661CC0A98F299F82B15CE9C8FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241147, "uuid": "b6ca6794-c6a5-44cc-8f17-9a369880622f", "value": "6144:mYRwLWFX9q7PU401WnrMy+hif2UBk4k5hQSecj:DWLGX9qTd01WrB+hyitDx7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241147, "uuid": "3f526d76-314a-4c57-ab3b-942ac7a761a7", "value": 212249, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241147, "uuid": "32692ac5-565e-4bf8-aa66-970c2b07df72", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c69f5b43-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload (PureCrypter)", "timestamp": 1776241148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241148, "uuid": "51f26e49-bb51-40e6-b249-464e1ed2e931", "comment": "Malware payload (PureCrypter)", "value": "9a3df72a3fca31f350248435009a3fc3", "object_relation": "md5", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241148, "uuid": "481a937f-1137-40b6-ad6c-f6f885ebf63f", "comment": "Malware payload (PureCrypter)", "value": "e794f8ac57d5781b90cc9875c5767101049fcd85007f145cfa3c5a318c53bdf7", "object_relation": "sha256", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241148, "uuid": "9b5cadb1-4c81-4974-b7f7-91cf1459c193", "value": "T1F3F1E868A7D48777D9F7477EDCB382824378FB45D643CF6E2888120BDA123610A52B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241148, "uuid": "eb7a78dc-4d66-41a4-84f2-92140cff99b4", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241148, "uuid": "15cf64d3-7055-42fa-b63d-20ad0f295479", "value": "96:0Iz9WzEktcf+uEwh8qKsxBAnUGBihXEAYuy02eFOdxsrThs/TllwEzNt:05cfd+qrwPMhXEA6eusrTS7llV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241148, "uuid": "3fa991fb-00fb-4c87-ac6b-f6b965aafbc6", "value": 8192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241148, "uuid": "f51e9e42-b553-47a7-ac3a-a5629c1735a0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6c8a9e3-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776241149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241149, "uuid": "4e3225b7-83a4-48e5-866d-c9a0bb1045ec", "comment": "Malware payload", "value": "423f00dc60a001ef1792890691a04696", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241149, "uuid": "db02c80b-a65a-42a7-a0af-f2ddcc91ac25", "comment": "Malware payload", "value": "b5f62126577cd8be9d381238da7c58a6e96036837d2e09fdd7f51b87708d8bdf", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241149, "uuid": "c7f0ffb6-d65c-4d30-8895-c03c20d92b8d", "value": "T1C6B53325B8A58F76107A5E3759466F0F1DE33789F81FCCA2C3E71A229D687853F016", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241149, "uuid": "487b6eb2-cc48-4f54-b1f3-f426b7a73087", "value": "49152:loImWbnkkowP2+NJv3IayxpSx34s6nuDC674ug+AwW4x:IakFwP2+Lvhyxp63uul/g+ZWs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241149, "uuid": "7773932c-bdff-47f1-a084-fc4a5f528f01", "value": 2306579, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241149, "uuid": "0b4bb25a-b58d-48be-a37f-c45423cf0df7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c77fa467-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776241150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241150, "uuid": "9db7de4a-5c54-45db-b103-895749176601", "comment": "Malware payload", "value": "d4feacbef68fd92246277f2b81163e5f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241150, "uuid": "494a6225-72fa-4b63-94df-1c96d34081aa", "comment": "Malware payload", "value": "74bcc0160ec5db7e34f441c8c8b6491fa689047b0d0649b689e294d91233a10b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241150, "uuid": "b9584d3c-8d65-4b78-afbc-54b8d7e3a91e", "value": "T18AA5334867ED1D5C00A2579AED9FFDC8901253BDF600CB2980818D36BB79A5B9F079", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241150, "uuid": "2c2255e2-ab53-4af4-915a-0d680b086516", "value": "49152:dAoG5R8QSh5YJAShm8qR8k8DKM+xTyUTImyZB/wz20BZSAKu3Hi+6g2lydv:dG09Y6ym86flRTIvHoK0uO7V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241150, "uuid": "a6f86ae2-2795-4b87-bd3f-c39d73c46863", "value": 2228529, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241150, "uuid": "e660e663-2dd5-4fdc-a46d-8bf4399b6ffb", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c78e5c8f-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1776241150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241150, "uuid": "4c5afe63-9621-4ea9-8496-5fce79acd357", "comment": "Malware payload (Formbook)", "value": "d72444d43128781aca00861cbff9bcb1", "object_relation": "md5", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241150, "uuid": "d79d4df5-86ac-4c50-bfd7-40a8e19aebbb", "comment": "Malware payload (Formbook)", "value": "20b24b43f6ff60c5c1bb21c38dbc1499d50b7cf875569257da991ab76d62a494", "object_relation": "sha256", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241150, "uuid": "af3782b7-b8ad-4ba7-8f3b-675af4af13b7", "value": "T1D305F1E03E36B31ADE610A31E569EDB582F92EA8704179F759EC3B4774AD2109D0CF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241150, "uuid": "9734d3f6-570d-4e73-8ee2-72c78fe622b1", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241150, "uuid": "ee807195-b60b-4cb4-98ba-b6fe4378d078", "value": "24576:/dzrlPwCeMNtmOjksTlYMMtwkE7HMnnEVwQs:5lPkMdYMMtwxz9js", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241150, "uuid": "efc5d451-1965-404a-95f1-d4b086552eeb", "value": 864776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241150, "uuid": "9e768bf6-934f-4f2d-a750-17c4cc5cf2d8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7b4a9bd-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload (PureCrypter)", "timestamp": 1776241150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241150, "uuid": "d6ebd0fd-0413-472f-9955-062927d482f4", "comment": "Malware payload (PureCrypter)", "value": "da7f96f81de79815fd51884f453fa9cb", "object_relation": "md5", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241150, "uuid": "3644b440-5e5d-4a78-904d-008032c63681", "comment": "Malware payload (PureCrypter)", "value": "88e9fddf31ff59fc486dd61bdefb8449a3deea14dedb71831034e586b0679827", "object_relation": "sha256", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241150, "uuid": "3690fdde-6ce8-4b26-a2cb-4c105d504613", "value": "T1C4A3A8A42AA88C1FF3F06731575DD1160906ADA5F49C573930963A39F670284A82EF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241150, "uuid": "139bed0b-987d-4d3c-a73a-34c91b3adf05", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241150, "uuid": "3388ec38-9b8e-4309-8cdf-278a45ce2efb", "value": "384:CPr/dW82EljzexuXK4oceN3xX20nr6X0iZhe6/QEX4wjjImnN/:t96uceN39Fnr6X0QgWX4w1N/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241150, "uuid": "4b348721-a170-423a-9fd0-8e3a72bf689d", "value": 98304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241150, "uuid": "38a34f65-3747-4419-a738-b34436ace520", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7ddf913-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776241150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241150, "uuid": "8a3247a3-5966-4b6c-9ae1-c4a1fb2e55a6", "comment": "Malware payload", "value": "20cc4f4cb772620690e36f8c6e2baa00", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241150, "uuid": "16817d86-0795-4d9f-8cb4-90f1ebdc0825", "comment": "Malware payload", "value": "d5edbdc190f39027ca5452e41fa7031daafb0c962da9e8189e29e117e45c1d7f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241150, "uuid": "c7b43873-cabd-4f5b-bf5a-1760fcebbc4f", "value": "T1C31533E1411828E05F5C373A4217DC202EED7DA6485AE9F377186F8F1B086CD69A7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241150, "uuid": "0b2933f0-1e23-4cd2-9719-3c3106dfbda6", "value": "24576:Glzh1Fc0gZu9yR+FJ0m/L9NF0dJTRVRS5Q:GlLn9yEym3F0TTR+5Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241150, "uuid": "80a63b8b-dfdb-4133-acc7-44e37cdc307c", "value": 900807, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241150, "uuid": "9c5001f8-22a0-4c36-a477-0555db743ceb", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7df2147-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776241150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241150, "uuid": "25acbed2-18c8-4545-b6f6-61cfd5645555", "comment": "Malware payload", "value": "5f6e65a75c24fb487841b03dd5b643d5", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241150, "uuid": "deb46dcc-b59e-4674-9335-4558fcc3e756", "comment": "Malware payload", "value": "66e788f8d7ab551caeded6684a390ddf085bdc4e7b1217eb2c273a44ae409b35", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241150, "uuid": "13a2b434-cd79-4a7a-a416-fc5f3341ba84", "value": "T18B353326C527C6043B54ED9D922C756F79DD708942F2A765A2863C4B4C1B3A32E133", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241150, "uuid": "f84297eb-b39c-426c-9a23-1507b5fba2dc", "value": "24576:0u/kNHyB5xmnQV1aPnyYb2EfutiVaTTDvS63PmOxSS:03Ny2QV1aPnyy/EDvS63P+S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241150, "uuid": "5452a273-e13e-408e-b9f8-6a5e5d474480", "value": 1093911, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241150, "uuid": "0a0907f8-5fd2-49d1-89b9-af3c2a4b7855", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c89b4a76-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload (MassLogger)", "timestamp": 1776241152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241152, "uuid": "92754223-5541-4396-97e1-b212aafd7dcf", "comment": "Malware payload (MassLogger)", "value": "6e03a31c0cc2c7e400f78ace3d7c28ac", "object_relation": "md5", "Tag": [ { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241152, "uuid": "17281e4b-8a39-40ce-9202-d3bf13af7f93", "comment": "Malware payload (MassLogger)", "value": "cc9e200e5afc679ca55a0e327c4d979f170f31c1de4296110a8bf321f0c01ca7", "object_relation": "sha256", "Tag": [ { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241152, "uuid": "1b113f5c-e75f-497a-86c9-d8672fe0d3de", "value": "T10BA3080E77D88924DAFF8531D57191210B7ABC96065AD22E1ED8B4EC2B7BA8044C7F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241152, "uuid": "c1962be8-a2fa-4b18-b39c-f76832265ad5", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241152, "uuid": "f9b3bfdf-0dca-4e16-831c-c9a94b186a36", "value": "1536:Pwa49SafKejKGAmwJVeDhp0dnbatrVf4UMR7pHpGmZZ:x49JXjKGHwJVeDDKnbanbMDHpG0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241152, "uuid": "8f849316-acc6-4aa9-9a2e-f65c895bf199", "value": 98816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241152, "uuid": "33294a36-823a-4ee8-be1e-f254d0fc2af1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8a7ff77-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload (PureCrypter)", "timestamp": 1776241152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241152, "uuid": "ff1223ad-a333-4aa4-9980-f93b94ef90be", "comment": "Malware payload (PureCrypter)", "value": "e7220c7ded88a99a461d9d08687c7336", "object_relation": "md5", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241152, "uuid": "aafbb53f-8384-4827-b159-dd524f511d80", "comment": "Malware payload (PureCrypter)", "value": "5bfef86cee07df46368abb6f568d43971fb16302cb2a8878d2c1a113e32eb26c", "object_relation": "sha256", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241152, "uuid": "648b7a06-c342-45d8-b01e-767b79fa7db2", "value": "T160221810A7955737CAAA4BB6E8E3035046F4E612A942DE6F2C8C5146BD123106B73B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241152, "uuid": "c27517e6-3c89-409c-934e-7cb4e5fac698", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241152, "uuid": "b63e450d-2310-47f7-8be3-f1cbd1260486", "value": "192:UxCA4PxJA9zeC1Gu0RuFdKTYLkcM6IP4849b:dDJA9zeA0RT0Lkv6IAR9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241152, "uuid": "20a00dea-bd24-493c-b402-65eb85c84d7f", "value": 10240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241152, "uuid": "2db8514f-9d37-4f77-bdb3-32115ee30b6c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8b88dab-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776241152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241152, "uuid": "a2d83ad1-2a7c-42f5-bd6f-bedb8a500442", "comment": "Malware payload", "value": "c97655e8563720ce017303f74429feae", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241152, "uuid": "60793290-db17-4534-a3c4-4147cfd38a73", "comment": "Malware payload", "value": "f0efd30c533733d2f20cbe78c53aec95979509cdabb52ede26a3b66b8e29c444", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241152, "uuid": "10980f50-b008-4f91-a500-88a6dd146fff", "value": "T1792423A281E757B21728B0CAB1FE819DF39DA21C1B76C3EE4690BD5C519493E14F21", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241152, "uuid": "c26d5bcc-30bd-4211-9b1d-4cdd31cf8987", "value": "3072:Fliwpl6QrVFLq/CX363NI4Rw3mhPVM3B6jmDq51t6s2kOpPOu5C8VYy8q0znIzZR:/rbFRd4mdnq510ZRFVYy8JznJaWsL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241152, "uuid": "a6f30a30-5e0c-4a1b-a84c-560f779dd148", "value": 225245, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241152, "uuid": "603efe1c-9071-42be-85f6-c19e90f4c380", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8c297e6-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776241152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241152, "uuid": "920f633b-ef3b-4e8a-bf6e-a57811264a07", "comment": "Malware payload", "value": "266e413679f0f87715c85b8ddd72d05b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241152, "uuid": "3f16113b-d6a0-4eca-a9db-27a93aef5b18", "comment": "Malware payload", "value": "e017b1705444f2fdb9e7b34210126e35bc3ee9f5429c5bb9c4ac785d40dc4bbb", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241152, "uuid": "dfabed8b-e3af-49c2-aad8-118d09c2a67b", "value": "T12223F25931EF8163C9FB56203D2CB1E2CC9A6D1A8F95578590776312BAB80B47E202", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241152, "uuid": "636463ae-2c5e-432e-a351-88ecf552983c", "value": "768:YoVAZBpeJ51wqpe4AYRXNpyu9XWxc8C/9vbooGH/AYXkQzeZgNsZuI+nRgDoY:YoVKp2513g4F5NP9Mc3/9T+8gWZu9pY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241152, "uuid": "de6280bf-73cb-47d5-b212-8f8bb1d615d1", "value": 47748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241152, "uuid": "c594ffcd-aa44-43cd-9f92-a2ae3a60f82d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8e6657f-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776241152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241152, "uuid": "8a6cf803-d21d-4be6-b4e9-6acc01850823", "comment": "Malware payload", "value": "25f1a86eb4300c233b4acc91b02ef40a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241152, "uuid": "87217b81-1194-4cbb-a553-5fef05962f0c", "comment": "Malware payload", "value": "d52e1ab91db1be08cf0dead229341acb929e173a1b9d8a305b09fca862a07a3d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241152, "uuid": "ea70901e-28fc-43fd-905e-c82d7d86b595", "value": "T1E81633B0FF60DB0EC21F9A810E1A29244C57CFC9610B1AAD397C53E1178F5A5798BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241152, "uuid": "42429b64-46e8-4dac-ac0c-f6d9712d4a23", "value": "98304:K3n+oBx77SdIb0bvgTzLfuPBu03uKvCXKx3q:boBx7GdIsvgTzLfuPBp3uKvoKM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241152, "uuid": "463e6e0e-7760-46b6-b46f-a32646b2c9e1", "value": 4304154, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241152, "uuid": "ea153fef-aef6-4e62-8cb7-25d6659d7001", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c95b1ac8-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1776241153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "f9f61a00-e986-4ea7-be54-8fa046ad65c9", "comment": "Malware payload (AgentTesla)", "value": "d3aa8806bd38b56101c65e4a071ccea4", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "1339542e-bb29-4459-a0f1-f55636ef9c6e", "comment": "Malware payload (AgentTesla)", "value": "1a77aaf34038dd299d9623a42f7ccfb8c9509826e13cf8f9c5f480d878530fc5", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "afaf8e73-23b4-401e-8514-156c328a28de", "value": "T10C34FD037E88EB15E1A93D3782EF6C2413B2B4C71633C60B6F49AFA518516825D7E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "bbfb8bc4-63d9-4c5e-a6cb-433c42aff0f1", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "218b89f8-6ce4-483b-93dd-8a9167095453", "value": "1536:SBwloHaA74RVpT7wa7j6cLbNh9t6CpyZhQCS4eYvj686FBEe5gEKmsCS+39NesPT:QFN74RVpT7HjZbqVudhBEe5TyCS+3bX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241153, "uuid": "1768d202-a964-4976-9930-a909f48c9648", "value": 240128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "b8525219-145c-4cb8-b64a-e2ffef7ea40e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c95f743f-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1776241153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "4fcb8943-bd49-475c-a05a-78dc4b0f67bb", "comment": "Malware payload (Formbook)", "value": "e278f6558f4d2f78b2ac2f228d9389dc", "object_relation": "md5", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "7253d4cd-d025-4cc0-b92c-6c0347bedf5d", "comment": "Malware payload (Formbook)", "value": "78ddb86c7e16686c4ef2cc8d7ebb72291ded39f9168247645e67cc0f650c15c8", "object_relation": "sha256", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "9a787292-6ab2-4353-bf9d-80fdb7c84881", "value": "T13C54221CFEC30AF9FD74A6B6F543F4E905BC56A0408CB0EFE346229889569E897D31", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "d16f68c6-1f69-4d67-b440-0e1d48e62a4c", "value": "6144:OfNqytPyvdsjt2Am3OKN+NMZjH6e33Y6aB8elL59nD8iNqBreAO:OfuWKN+KJ3I6apnD8iNqBSAO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241153, "uuid": "101dbfe5-7352-4f44-ab12-b4c6728858fc", "value": 285184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "66d9cc2d-4b6d-478e-a2bf-4c461fd71f96", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c96080c7-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload (MassLogger)", "timestamp": 1776241153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "18bf2e8a-5628-4bae-8b1c-64ef9f283cab", "comment": "Malware payload (MassLogger)", "value": "87c79a49302a792a6969ee7ca1cfcc37", "object_relation": "md5", "Tag": [ { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "01d40f12-d372-4bf4-b9f1-404a59087b11", "comment": "Malware payload (MassLogger)", "value": "f4c5860773c9edc6e4ff0c196ff591b8e906f232a607fd1ac74baeda1204a64b", "object_relation": "sha256", "Tag": [ { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "0727fbd9-273b-44b3-8201-35cc9ebda842", "value": "T1FCD42362E5188DC5F8221173913FEF99036BEF79883A174D35EB742A95B31D204A0F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "46517400-de96-4129-a3e7-b008d01082bc", "value": "ef471c0edf1877cd5a881a6a8bf647b9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "a601ca69-59ab-4e66-b603-7d374aaabb62", "value": "12288:XOv5jKhsfoPA+yeVKUCUxP4C902bdRtJJPi2+5goN7lvbWME39Aby9hsyGx:Xq5TfcdHj4fmb3QgoNBQ3q4Qx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241153, "uuid": "933e99f4-ac2b-4d1a-89b9-dffa449f05a8", "value": 614400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "e5180926-0042-4804-9966-6df600553917", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c975c089-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1776241153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "58150a61-3d49-43e8-8cb5-25070fa75c22", "comment": "Malware payload (Formbook)", "value": "897f11fc992f5ed0f01b5fcd69957a1a", "object_relation": "md5", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "a836cf13-693d-4fca-9c84-e06061d837ba", "comment": "Malware payload (Formbook)", "value": "67ff11dca6102d119fb3cc42da0c7d920db3d94e0fde800689d11540e9dfe5a1", "object_relation": "sha256", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "93de0e3a-1b30-4e93-b9c0-81abc1af1477", "value": "T1E515F1E03B29BB09DE610A31E979EDB642F61D68B4107AE659DD3B4739BC2116D0CF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "e0ef2d81-6713-46f1-aa9c-df2e06129bfd", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "490b023b-046b-4f7a-af54-b4ceb1f8bf4b", "value": "24576:4xwjKSoyMxCsuoOCVEMJka0qvLV0G41BlrCBdzrlD:ROrvTuorEMt06LOHCrlD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241153, "uuid": "b5e03269-4596-4710-ab92-89ef0d9c953a", "value": 881672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "c37d85b7-85b1-46a1-93b1-8226f335b5b9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c97724e2-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776241153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "24bf1eb0-1f92-46d0-95b1-40d156ddafd8", "comment": "Malware payload", "value": "72f19b06b98cbd0f8221df719bf73631", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "b6dc266a-b1da-4ad9-981f-6da685c2ff97", "comment": "Malware payload", "value": "640d78e3ce09d542490755764a599b2d5422d5bca5924b048292ff8dc3c79ca9", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "257cb658-fd84-4768-a53d-e625a77cce24", "value": "T15CC533FA4BE722E97C271FB1A4FB45DA90A097DFA7C5118986020F149313836E35F8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "5e17be32-a92e-4941-9158-65b204450b15", "value": "49152:wSgcgtw6rz1a83wB8wfc7ofW8l/rlddTFRYyRYw3zR0wOPSVAKHEjmv:wSgcgtPa/G25BddTFRYOliwOsAKHbv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241153, "uuid": "d978c8d1-d811-4024-b2c0-5e5acaf945b8", "value": 2682932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "c2d9e873-2e51-44db-8535-2ccc2e970690", "value": "application/x-7z-compressed", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9881d8e-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776241153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "3c514cf6-6fec-4ec7-823a-eeb4fa2b9a63", "comment": "Malware payload", "value": "62a5f0c9fe72a5964c38b5fdede073b3", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "1b62ee08-f86c-43e1-b6cb-4a90159ec445", "comment": "Malware payload", "value": "2503f44d7f0d067884234577183a271301b1203329e30ff5ffbfc02995df4f3f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "f4f00718-760e-42d1-98cf-1523b54ec87d", "value": "T179853383A3C23031D83B9C1A524A748DD656153D44160FABDE3F3A0D62629B93EFE5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "2a20af2a-e473-4be6-998b-7298f0b05a54", "value": "49152:4Z+tWBI9sOS+p9otZb+o+v+tj5gVzbglFMTMaInTuBIN:oyEOF/W5+o+UgVzbgl3JTuk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241153, "uuid": "9bc427f3-1a02-43c6-8c27-baaabc7092f4", "value": 1810694, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "b6d4fc73-c795-451a-9577-1a578d5a0572", "value": "application/x-7z-compressed", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9972701-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776241153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "13b9b376-fae2-4e94-a866-9309c21a65e4", "comment": "Malware payload", "value": "6a85b5b27eec999d5f64c38a8903daff", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "8329702a-7db7-4140-ba88-0dae2007088f", "comment": "Malware payload", "value": "469c53c9cb5385c9c722ced743d168af98264292922a2ba2eb42461837c6ee13", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "054734a6-d976-4b90-8764-dea2484d1912", "value": "T110A533F2E12411F3FE6D414D10FDA8A3A869BA8BEE7E10C4004E7D59DBBF979C0169", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "53d1f3ad-30ca-4cf7-97ef-55bc8944237f", "value": "49152:3kxjT2s1Tdv5tiGsA+Cj3p0BYosJtYfXIQZZU3tuvWF9kMXh2QswOGjVh9pA9l0/:Gamv5cG6g3qBlcyxZlOFyMHlOn9l0/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241153, "uuid": "19692dc2-0792-4cb0-83b0-3407945242f3", "value": 2234388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241153, "uuid": "cf21bcf8-5e2a-42ec-a49c-6ea85ea9b656", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca66fb96-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1776241155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241155, "uuid": "8c508707-4701-470d-93c1-6be2fdfa19de", "comment": "Malware payload (AgentTesla)", "value": "e104213949c1fb19467c6d59d0c9fc14", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241155, "uuid": "01ee54e1-e820-4d67-bc49-dc54ef7b6081", "comment": "Malware payload (AgentTesla)", "value": "c34d450925e87b99990ceaa3e7d6f1f02c846dd981f4d7fb8b9331ec89fa4fdd", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241155, "uuid": "e38be625-018c-44fb-8e3e-184c415a009f", "value": "T19265021589C43FB4CFDC162D40FE251EE3A05E8A541AB989EB73FD4AFFA7204521B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241155, "uuid": "5c3b4d4b-e361-45bb-8c78-c43ca506bd08", "value": "24576:C7+/yCfO7Jw2xPrJ6GyqXKMHSx65DBVwNvPof0T4zJq:4Vz9hHHCNnn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241155, "uuid": "16a08f0a-74da-4abc-963d-28a7d394b8ea", "value": 1422867, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241155, "uuid": "eedba317-61ae-42ff-9dcb-d6df1526b292", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "caced573-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1776241155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241155, "uuid": "3f83d0f8-983f-4cc7-b2f7-6367acfa2bb5", "comment": "Malware payload (Formbook)", "value": "721e38fb31c87d7b9338c1b2d4e50ce5", "object_relation": "md5", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241155, "uuid": "09bce3c1-dfeb-4a7a-ac0e-b660d5c861dc", "comment": "Malware payload (Formbook)", "value": "2119f966c3d9382f741907abca4d5ceca439f922aa758b31ce98209763cfd86e", "object_relation": "sha256", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241155, "uuid": "70910017-f4f6-4592-abb3-24e91ef8b9ad", "value": "T14905E1D03E75B719DEA14A319178DEB682F51E68B010BEF619DC7B5B349D220AE0CF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241155, "uuid": "132d8425-e3eb-4115-90ba-b997f2dc1e11", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241155, "uuid": "09846070-1942-46a1-96ea-94600614b9e8", "value": "12288:aK/KxUBxV3biBZa/SQ+2cXP4zI1xsxJhdw8kzbL8Gx0xZbrQjyGJPztq0rlRkR:PCuBxV3WZGN+F/4+0Jhu80LHUZ01rlM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241155, "uuid": "f0d31ed8-af12-4e58-a27a-939d646f870d", "value": 819720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241155, "uuid": "2f0ee39c-c304-4592-a530-c091d0de0018", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cae32e09-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776241155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241155, "uuid": "ede1a21e-0713-4e7c-b374-8d5e2c5943cd", "comment": "Malware payload", "value": "a7456d8e7704edba2a40b54cf232ff82", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241155, "uuid": "bbed6b47-5b7a-4a9f-8938-d0a13d158967", "comment": "Malware payload", "value": "012dab3023d95a96f2c21db763264bc26655d57e4a32243aba0d52cc99464102", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241155, "uuid": "efadd3ad-4760-4788-9fee-44ffe930833e", "value": "T1EE95F25189C43FA5CFAC161990FE220DA3E15E8B501B798AEB33FD46AFF7604521B0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241155, "uuid": "320ce748-603e-4976-b41e-fe06deb8bf94", "value": "24576:dhIkD554a2HSzro6zBwIZUDZQpuM6dhIkD554a2HSzro6zBwIZUDZQpuM6+r:skt6vvyDkt6vvyr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241155, "uuid": "e42547b1-28b9-4271-be7a-136db8a5890e", "value": 1905234, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241155, "uuid": "501a2ea6-e7f9-4c54-b286-c1f0c52012d0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cae54ea2-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload (XWorm)", "timestamp": 1776241156, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241156, "uuid": "a42a0167-9385-4b8c-8cb2-4404d0d77670", "comment": "Malware payload (XWorm)", "value": "9fff548c62f6d9508e53f9ad43ad4046", "object_relation": "md5", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241156, "uuid": "4b09ab07-6560-4358-b6ad-cbd6c33e63d7", "comment": "Malware payload (XWorm)", "value": "3dd9a087a124f08ae4a29d420a2362544c8a0f32e1a9bdfb1b2b3fac1789d753", "object_relation": "sha256", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241156, "uuid": "aedbc314-7ed2-4a09-ba38-eef4d8542632", "value": "T12AE35CAEFB51AD01C64C0E7BC157510487BEC9AB6427FB9B21C81CB59DA3C988C8B7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241156, "uuid": "3a02b7f7-53ac-484a-a29b-b5d484167ed3", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241156, "uuid": "ebde1464-e099-416d-9b90-bb77f470d21f", "value": "3072:70LW9p5eLBRjEsU39Q8KOXm5UZ3NbWNeRykw:735e9RgsU3qVudbWv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241156, "uuid": "83db7877-5460-4497-bdbc-595a5919d3fe", "value": 145920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241156, "uuid": "e85960ff-8611-4c43-8154-f75f5c9302e8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "caee8a5d-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776241156, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241156, "uuid": "e390d13b-ba25-4bdb-bc4b-c755f7d83a5e", "comment": "Malware payload", "value": "1503e22fa617955046811c9239f1e714", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241156, "uuid": "2c3cb9d5-5929-40c4-a9c0-998457ff134e", "comment": "Malware payload", "value": "716422114395496cd26d4d5be15a15362052fcc4802f5b952679b0df365217da", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241156, "uuid": "9f5bc3ad-3dc6-46e6-bb81-2f2268c90b2f", "value": "T1FE7302D9A72D2609393AC84D2FBD1CAE035781D7E3AC42455B3AC7D9723A74E8843C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241156, "uuid": "0dc1a845-bad4-4bae-9448-1a6c326cbf35", "value": "1536:cb19yK3X80Kp0VviDTIO17WTW6Y5hbzrGKk/VQoCmQfzQOPIZ3He8:cXHrrVvtmR5E/+PzA5+8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241156, "uuid": "7bf347b3-35fb-42a1-ac4e-bef8e9cea2c4", "value": 79518, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241156, "uuid": "3ab78c3a-2d99-4ead-adf7-963211400dbb", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "caf872f4-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776241156, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241156, "uuid": "5cb10d2f-f881-4ad9-b709-b3f8dea2b10a", "comment": "Malware payload", "value": "bbcb59306580d02594bb5f2e4961502e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241156, "uuid": "c039efad-1bf2-40e1-89f7-3531da6f3696", "comment": "Malware payload", "value": "9bb19452b0054e3050dfaf72454dc8a17fd984b137058891be5992684101be33", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241156, "uuid": "ad96d04e-8eaa-49a5-ba5d-0acf9c8e20d6", "value": "T12165330E37C7E56B05A238E0CDCA91EE40856D695A558CD6A9CD78D7F0F0F80F248E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241156, "uuid": "4a96f045-ab17-4a1b-b1f3-0d84a4b5aea3", "value": "24576:4dOU7sv2VYGsWaQ/Cr2jHsRHa/OvJBp5pXnvDOfCpbgIfquP+cF:Fv2VaWao/OV5VnvSfvIfYo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241156, "uuid": "1bcbaba8-fb9a-4de3-95ad-d0d7b099f1da", "value": 1468048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241156, "uuid": "a7c15fb9-4434-4c6c-8688-c655e0af7a84", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "caff31d3-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload (PureCrypter)", "timestamp": 1776241156, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241156, "uuid": "7e915232-06e9-4d90-8eb1-1b65f50e18e2", "comment": "Malware payload (PureCrypter)", "value": "0756ac5b9e8d3502bca2892c1e110269", "object_relation": "md5", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241156, "uuid": "2f091376-1857-491b-8afc-a4f57a96c109", "comment": "Malware payload (PureCrypter)", "value": "128c8ef96e6e9ff4d2727b23f68cfc66fb089777de37965c153cde889f1cd7ba", "object_relation": "sha256", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241156, "uuid": "2c251f39-0186-4a81-8e05-6d6a8532d0a1", "value": "T1EEC33B70D78CC793C5BD5AB95472520003F5EDAAA812FB5B5C98B4E96C333861A332", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241156, "uuid": "d1955acc-cde2-4457-bcf8-b301a6696b51", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241156, "uuid": "0b58fc34-edac-4559-910c-8a762707f301", "value": "3072:ssKxGH0zQTfotl/bMEZH1TLGWjzCiu1L7pw/iqWMuc0n7N5N7nSY0MCEXlH9XykK:ssKxGH0zQTfotl/b/TQiIQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241156, "uuid": "9b4e4dc9-5274-47d6-b1f4-5517ad9f09d3", "value": 119296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241156, "uuid": "07496f44-555b-4b31-be01-440b955eefd0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb4ac984-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776241156, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241156, "uuid": "287c1538-3384-474a-a3e3-2a4587acd458", "comment": "Malware payload", "value": "00207ec3e64fe8d5ddb49877f219f9c2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241156, "uuid": "b3172312-9492-4c6a-90d8-fc833ed64eab", "comment": "Malware payload", "value": "2c2d860f3c8dcfd6d0d6085e4898cf49b1a2c8118003e0aa9f98d7a98e429d16", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241156, "uuid": "506e1bb8-1212-4821-877d-de35b28058b7", "value": "T1F954803EF24FF403D2D8F57CE0E5521406AA5E8E3C8DA6683858B590E5B6E487A03F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241156, "uuid": "051c0fec-6312-4696-8179-008cd874c1b8", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241156, "uuid": "365bab48-dd5c-4f13-8ba9-8743523524a1", "value": "3072:S587oQUjVHhZK0iuIM/J9+R3zm8SgZFEUv/LroKXXXXXXXXeO2RJ:ATxJ9+Ry8XZFEcwBO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241156, "uuid": "36f352ca-362e-4df8-8c7a-36c668de7927", "value": 288768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241156, "uuid": "82451941-d8c3-45fe-8dad-1023e04b1e91", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cbddd478-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload (MassLogger)", "timestamp": 1776241157, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241157, "uuid": "aeaa0e14-bd91-4cda-b864-324c7c410ae3", "comment": "Malware payload (MassLogger)", "value": "28184d3d643aa611dda323b40261306b", "object_relation": "md5", "Tag": [ { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241157, "uuid": "bfe094e4-0185-4b14-a02e-428bf7aa4402", "comment": "Malware payload (MassLogger)", "value": "9dee1f01f62ac121f05da0afd753e25ff3e832d5c75b516b8d8fef92b675d209", "object_relation": "sha256", "Tag": [ { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241157, "uuid": "4b6b21dd-a19d-4a04-9c96-44ade116df71", "value": "T1554502522654C2DBD25C5538C0B792781175CEBA27E7CD0AEECE3F675630B4E2E6C8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241157, "uuid": "d544360f-05e9-4b80-b668-45c31fe46988", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241157, "uuid": "2759f76e-00da-4c69-9848-8176f3cc2cda", "value": "24576:2yYm852b89TTgPR74fTI/9m/eS+6imBBqtqVSic:uN52b8G7UIjSimXqvj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776241157, "uuid": "25e266ce-1f93-4e26-8389-79f5cb70ea7b", "value": 1245696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241157, "uuid": "e5c244b8-8822-4123-b327-0f79f46a3d4c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddf24251-38a5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1776242046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242046, "uuid": "545c378f-b21e-46b6-8bce-656f70d1df3f", "comment": "Malware payload (Formbook)", "value": "4ba28a75679c62df2342ccef16707ce2", "object_relation": "md5", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242046, "uuid": "c366319f-74cd-42ef-b7c6-a980816447f9", "comment": "Malware payload (Formbook)", "value": "072001c16c0663baaefe3741453b288bf13f38e9faf43a693fae3bed70a6dfba", "object_relation": "sha256", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242046, "uuid": "48272ab6-ff13-4c5e-9973-b760db45d3d8", "value": "T1DD54AB8D7E506E85BC1D8A6BA331CC28647917F6762F70CE540A23E66D417C0DFDAC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242046, "uuid": "80b9ce09-9e4c-4ec5-a4c1-c4c5a6f414ec", "value": "768:tSGmSGmSGmSGmSGmSGmSGmSGmSGmSGmSGmSGmSGmSGmSGmSGmSGmSGmSGmSGmSGD:1L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776242046, "uuid": "d7576ea4-9e5f-4239-b735-7c84d019f84c", "value": 286817, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242046, "uuid": "d82c03c7-a6ec-4d4a-89aa-461aba1fb744", "value": "application/csv", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a46dd38a-33f3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776242049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242049, "uuid": "8a60b617-4e67-4f3a-936d-f42b5281917b", "comment": "Malware payload", "value": "e8b080c276519547e95930ab15028adb", "object_relation": "md5", "Tag": [ { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242049, "uuid": "1f5d5dfb-f773-412a-8328-7d9728dee9be", "comment": "Malware payload", "value": "d6802fce5b918ed247ba85d6aa0545a8120cfbc3734b1c37794c4e381862d4ee", "object_relation": "sha256", "Tag": [ { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242049, "uuid": "193a8daf-35f7-4635-9c7a-e204bae65811", "value": "T1E3958E46B3A501FCD467C178CD466217F672B4041774ABEF45A08A6A2F73BE23A7E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242049, "uuid": "fc35a990-df3c-4105-b27d-f6afe898a0ec", "value": "72aa3d705bc1c7cc7c6057e4a008c2de", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242049, "uuid": "493ad0f2-4df4-4762-8c8b-acc59e3734c6", "value": "24576:MAbGrci1CVsb+JPrf+xp8esqhNyjAibJULb1hstRqGG7srGX8vCWI7JgZlHavtdP:VN7Jjfa87S1LktRqVzfHXxQk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776242049, "uuid": "5b01b5b4-9564-445d-a0d4-b92210cd8dc7", "value": 2058752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242049, "uuid": "13efbf2e-2d5f-4f56-9551-b1f949d238db", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25630808-38a6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1776242166, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242166, "uuid": "0ea4a0ae-987d-4b54-a204-64325dc56fdf", "comment": "Malware payload (Formbook)", "value": "247661ae2c8c2040ba8bbb12464bdca3", "object_relation": "md5", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242166, "uuid": "ec7de03b-0da0-47b1-bf1b-b022b01a8115", "comment": "Malware payload (Formbook)", "value": "92354fb4e971d88d3b4aee3e946ad8364f7a302de82acaa1ea7bcb233b2c463e", "object_relation": "sha256", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242166, "uuid": "2dacd950-70a2-44c1-a70b-1a39c10a8ef1", "value": "T1C724ACF801A88CCB3E5C75F282D642677EAD09DE5132C008FA6C955E19B985DFC4FD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242166, "uuid": "ed86f75e-c9a7-4854-8c07-7e9cdf116b52", "value": "384:7llllllllllllllllllllllllllllllllllllllllllllllllllllllllllllll7:FhHMbzxg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776242166, "uuid": "cdaf475a-807c-4131-ba26-851d4b01ba37", "value": 229166, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242166, "uuid": "66d4fe3e-fadb-40be-9ff8-3c821a407653", "value": "application/csv", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48e4cafd-38a6-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776242226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242226, "uuid": "f26f36fb-17aa-4fbd-8e35-012d1075cca2", "comment": "Malware payload", "value": "dca50f0364967176b4a8dbe0689ec341", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242226, "uuid": "8a2eec86-0e41-4b06-a216-c60c4640148d", "comment": "Malware payload", "value": "adc15be86579110098074e184badf7a2a3bec49cec9702dda466eef9a7c7f314", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242226, "uuid": "4489d12d-fbc6-4c9d-a0f2-1fdfb05eda22", "value": "T1B0C02B2303ADAC520D1208D0DE00AD0D15EA144E0BAAB7D00572C06480040C373D1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242226, "uuid": "19eb159b-d922-4b41-af5e-b2ee9820f0a1", "value": "3:N8dHElMKKhmHEVZBgyGLERk9ZASldRPJ38RqLYfXdF9cGI1vxXR4V:2FElLZHyiycVMcdRx3HYXL93I1vJ+V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776242226, "uuid": "07d643e5-3403-4079-94a6-a8ea86bc3637", "value": 142, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242226, "uuid": "47c262d5-e757-40ba-ae61-cf83aa45a547", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a0f7852-38a6-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776242228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242228, "uuid": "c4caad0f-40a2-4dcc-a9e7-d2fb98bab9e0", "comment": "Malware payload", "value": "8d32659b3df9afe0c37f367d27a31ea9", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242228, "uuid": "5f16ba5c-9e56-4a4e-97c8-2bd7361fd7fa", "comment": "Malware payload", "value": "824fbf4471ac68d3ae7ef25e923111a6a2ee0f7cf62bee34991b08f8e8d99a3f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242228, "uuid": "32ac58e3-503a-424f-8a3a-c1bb32b0af89", "value": "T1D7C02B31038FFB314C1204D19F00F407132506441B4EE3C40438C0B4901405321A91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242228, "uuid": "4590a5e3-92ff-4860-97e7-5590f409ff8c", "value": "3:N8dHElMKKhmHEVZBgyGLERkZwVMlV38RqLYKdANBqERG65dnDCGIdn:2FElLZHyiycVZgMD3H/CB/g6PFId", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776242228, "uuid": "8b5677cc-0002-42f7-ab3f-4a7980028ca8", "value": 141, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242228, "uuid": "b62aeb48-dd58-4fda-ad12-a213cd813de7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bfb21f7-38a6-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776242231, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242231, "uuid": "32f3b5bc-b98d-4e00-bae6-13bfa37d3f21", "comment": "Malware payload", "value": "97814599b927214f4cbf41eca157db07", "object_relation": "md5", "Tag": [ { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242231, "uuid": "4c832017-9877-4218-8b27-d47f289cf1d4", "comment": "Malware payload", "value": "5da08754578672779e1f430a57427ccdbf970330547b3fdcb3c3314add4a4bbd", "object_relation": "sha256", "Tag": [ { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242231, "uuid": "a793f4e8-d3d3-4cf3-bcd3-9789b98adbbd", "value": "T1AAC371B3DB41A65C17535F2CB70A232AF51DA42773AED703AB930D12A0FCBB615366", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242231, "uuid": "8318d3ce-3755-4094-b5ab-d3cb8b06d859", "value": "1536:tgXkg3vhv6u9ImBmIfR9qYjIa9MM3w5L0ZsPBsvpd3gJ8EKekS:tgF5tvRyHBsv8l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776242231, "uuid": "52a268de-1d6a-4eed-92ca-6122235ab553", "value": 119550, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242231, "uuid": "3e68df4d-8356-4494-926e-85f80adf0ca1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4899b9f2-38a7-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776242655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242655, "uuid": "308ac62c-ecf9-430a-a415-cfbddf2cb991", "comment": "Malware payload", "value": "2b4ab1402006b035d6454208d224b6b8", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242655, "uuid": "021794a5-3745-4efe-b25f-fdbee37097ad", "comment": "Malware payload", "value": "93248ce2f1e5535678b664157657d2e7d9d5eec1e0c7e8b2d54170003944d0ef", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242655, "uuid": "0d0e883f-36a9-48ce-926e-a591274a907e", "value": "T119553300C4BB0F79EC920D4FA06A7D06C65831C953124D0D276A6BD838BF96DADF76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242655, "uuid": "1985cb93-fb8c-49ff-9038-8e87a7dc8f41", "value": "24576:diNrClSthlMbSRpQng7qyqYcDbaJXH4wcm2WkrIv0ZSCRJYBMjzBFvPTZi:7U0277qFWJXYwcnPrK6DQm1FvPdi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776242655, "uuid": "f1fa3f83-c092-4ab6-8027-175b51da945f", "value": 1340837, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242655, "uuid": "6b1212b0-169c-4ccf-a061-58723b7f0879", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b208ec3-38a8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776243008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776243008, "uuid": "8ce63e4c-2736-4313-8d59-4d181343ef3e", "comment": "Malware payload", "value": "6d68ca3aa801079c5afb484c4d74d903", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776243008, "uuid": "90f1e244-fdda-4353-a620-f5ed9205e6fd", "comment": "Malware payload", "value": "1a8a84b67528d9632bdcd5933f4b97d7de7fc3e19e9a2acddde45705a15634a5", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776243008, "uuid": "38c85549-9a54-4ae2-907c-99ab6d937600", "value": "T18DD5331B5A0D61B4E30FBD987F5B7936BD95651723E33370ACC6E8C8363442CA4B25", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776243008, "uuid": "91be361d-cfc8-41b9-8a79-926e4ee9cdbd", "value": "49152:7i77nNlRXD/Ieg4DXBjZ+79JZJpUcweLeR7dJtDhOdUbBShI5HE45pT01S8HN:7ufRXD/I/GS9JZUvxdJt1DEApmS8t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776243008, "uuid": "45732c7c-900f-4b04-bb1e-56ade466414d", "value": 2931737, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776243008, "uuid": "d37ea9d0-a69e-4bf5-8793-ac10797263ae", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "669a54e6-38b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776248289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776248289, "uuid": "be6c6696-e6f2-4d8d-b802-cca9a37ef71c", "comment": "Malware payload (Mirai)", "value": "44c17b3ee2ebe21c09c212aabb470676", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776248289, "uuid": "f789f317-5eaa-409a-8e7e-54b4e248ff2c", "comment": "Malware payload (Mirai)", "value": "fc38381eae0370afab4933713374775157e96f6921e126f8b71f10ed89cbc5b3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776248289, "uuid": "58e0b8fd-4f20-470c-bf3f-993c4021fbea", "value": "T1AF63F2B0051E9652B2F0703BCA58EB4E3F9B37F59825396D371C4E307F8620A69766", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776248289, "uuid": "f317d617-5b32-4b3b-b8a1-1140ee9280d2", "value": "1536:YCtY6p0KaIjM7r6W6f6IL0J3vSh5OHuw8/XbpmlXzNQAmu9fzH:DtYMo9rN6f6Ia/2UHL2XNgpL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776248289, "uuid": "ad795b1c-17ab-4ebf-970f-e4a15962a8b8", "value": 70176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776248289, "uuid": "0650d835-600a-4234-99e2-e27eea70af70", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a684ac49-38b5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776248825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776248825, "uuid": "8346693d-a6ce-432e-9738-043f0d6e2a33", "comment": "Malware payload (Mirai)", "value": "0eadc76fff44df277dcbb302d6271fe5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776248825, "uuid": "80e43239-1c13-45dd-9c8a-3b97e94c3430", "comment": "Malware payload (Mirai)", "value": "d9e3cfe175d2d8f0debb67a203d5f7d231983e75cf95f5a4862bf105b0d45040", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776248825, "uuid": "56e00024-87ac-4f03-a4d5-1a90fcae2e57", "value": "T1F7F2F17C0FC6D479DAB09E3194A9C8A1939376BD3AF871692618468CE64310F4FFC0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776248825, "uuid": "a01c4004-8c85-4601-a884-8df81b60a6b0", "value": "768:HzmgwrN8VG7jy5J5WwNrP5CtpjjIyrFG4WcL1s3Uoz+:H7U8G/QJ5frhCzXlrFG4WcL4z+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776248825, "uuid": "d425f1d3-fe20-4607-b1b4-331636c46749", "value": 36292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776248825, "uuid": "637cb5e6-e79f-4781-bb78-998c39c4d8de", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85e0f3e2-38b7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776249630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776249630, "uuid": "6efc49dd-7414-4b2b-a98a-5dfa436f3084", "comment": "Malware payload (Mirai)", "value": "86861e41f198731f082935cbcd54aa48", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776249630, "uuid": "795d50a6-1141-44f8-9763-590e2eb6f643", "comment": "Malware payload (Mirai)", "value": "c44a67d273a2469dd4a2e3bd425fd6fb96182d16f9fca3c429c6407293d48db9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776249630, "uuid": "ad781e21-a2e0-40c3-a44e-25780ba469bf", "value": "T13673025CBF6A78E286954A33ECFC4D852F8A527BD4FC261A01F11150903E5927FE67", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776249630, "uuid": "d0846d9e-f565-4500-963a-c012811c32f0", "value": "1536:66OXZxyowPaU5yzfRuCn4Zn8mQcTHqEhu2MotvxxpxZ7z3LI:9OXZjwPejRuY4qmPFMGTpxZ7DLI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776249630, "uuid": "ce4afbe4-30b3-4727-b2b2-613a83637883", "value": 74684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776249630, "uuid": "3669c16d-90a7-4b84-857d-4452ec5b8842", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16287d1a-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776249818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776249818, "uuid": "c0bd827c-dc75-478b-9377-17f4a608d927", "comment": "Malware payload", "value": "ee9986b9d1c62cda420b671c6def4efe", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776249818, "uuid": "4fb9447f-18c6-454a-ab8f-656e8c6de906", "comment": "Malware payload", "value": "20c9c9e9153564ee44ab7fa7bdb571956245c08859844048df1e8b8771505eeb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776249818, "uuid": "4ece2168-13df-4e61-bbe6-14124f19a297", "value": "E123018623663FB3D13158F5E7FCEF85A14A7D94AFE6180A7C227698A07135C28C8D1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776249818, "uuid": "5f69fb22-ffc6-436d-840e-152e6dcf9eb6", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgsK:yYI0ARqw1qAEv7UIFM8oJorFK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776249818, "uuid": "b3900307-f45b-41ef-9e54-c039e9e71624", "value": 49232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a88d1434-38b8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776250117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776250117, "uuid": "1bbcc8dd-1f33-4b79-b75f-dece62cb96bb", "comment": "Malware payload (Mirai)", "value": "72ae1cd00729769751abef2ca22ee15f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776250117, "uuid": "2d0bc75f-b1f6-4b01-bfb6-d8f910ce16e8", "comment": "Malware payload (Mirai)", "value": "c18a2e92cbf0a6fbe88d305f78a689c44f705fe474d9ea1166fd6c16f45d9aa3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776250117, "uuid": "d1a97766-9a57-403e-bb0c-5a65f5c3f9e3", "value": "T1EB049E32D8786FD8C2748171F1B0DA791B53B5A042571FBF9AEAC1790087E84F90A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776250117, "uuid": "848b040c-e874-4647-bcf0-7e54a5ce08ef", "value": "3072:PpBvRdVQjsdI5P3/tSGjVixY0/GJvu6SWKon+/BGZA:PpBKsi1VixYrffD4G6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776250117, "uuid": "82a10efd-4dd0-4479-8eca-9ca0d1583995", "value": 175972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776250117, "uuid": "1056c498-112e-4166-bf5c-68d685b2e5eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1dee5e87-38b9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776250314, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776250314, "uuid": "b43a95fc-dac3-430b-b601-6ac7ecdf5814", "comment": "Malware payload", "value": "44fd16a4aa38dcc2234c128d2f2f1d34", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776250314, "uuid": "c73bb461-2268-49b7-b65c-cfb3fcd2854a", "comment": "Malware payload", "value": "e12ae46c22bcd9d84ebd12087c1c1afba59ff144168accc6d52fdd7ecd210c06", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776250314, "uuid": "f0be6a75-b722-43f6-9143-0b9a97aad73c", "value": "T1005623F69E982D46CA0251F629D7790C47D0DA34849BE520BFA8069FD2CEB7C25273", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776250314, "uuid": "3796d46a-4b8a-412a-bec2-184f2b68e1f8", "value": "6144:ust0k9Xl1jPlo9dIP7E9uZr6DJnGEEmsmuHM/p6UGF2Lz1zgx9Pi5+o3LCzT:b2IDjtsdcBZmEEEzT81zgY+YCzT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776250314, "uuid": "ee7cbbce-c5bb-470b-8563-4c2568afccdc", "value": 6271176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776250314, "uuid": "290dd376-0d96-4a28-9d72-d268d5fb9939", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98b04219-38b9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776250520, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776250520, "uuid": "2a5b56da-2ef9-431e-a641-24068f543541", "comment": "Malware payload (Mirai)", "value": "e6e397dfa4d5b3fba710a2905f50a0a3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776250520, "uuid": "d02ab877-e246-4a6d-8736-bffccdce9b42", "comment": "Malware payload (Mirai)", "value": "23c1328e77ef4011fdb962bfad2679a7bf339bd13a795405c343bac7ea65dc94", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776250520, "uuid": "0b23043f-ef97-4f2d-a944-232085f180e6", "value": "T1FE4302D4C2D25D96C58DC13604FBF9AF1942256DF45CCAF601502A63B8A7FE33AAC2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776250520, "uuid": "bab11efc-c5dc-458c-a462-dbd0d40299c3", "value": "1536:vTnGsuaZDUWEQ1zxUIbOr/irASAdoeOwJv7nouy8Ey4:vjGjaZAWWiUXdvjoutK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776250520, "uuid": "f26f6d6b-9bf8-4e17-a6e9-66d95918b37d", "value": 59200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776250520, "uuid": "b4c804a8-cc58-498e-9004-9b055435005c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11ef3937-38ba-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776250724, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776250724, "uuid": "c9813b59-16de-402f-aa50-326740c76370", "comment": "Malware payload", "value": "f3ca08707a0ab6b7706cc30037e33d30", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776250724, "uuid": "4b5ef0f4-e7d1-473c-a55b-14dddfe94a07", "comment": "Malware payload", "value": "0a0d22b645f5679d9e0092ed3bf9fcbaa0bcdde23be9ab074c386a636962efda", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776250724, "uuid": "34c47bc5-0ad3-460e-a4fd-8830a7966eb0", "value": "T14C8372B6068D103322276687E0253B1EB1E7963ADE1B89D773FF4AD86FC1DD786125", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776250724, "uuid": "0fdae7d4-f226-45e3-91e1-692d5b7daa63", "value": "1536:2EO74D0bfVuzDKYooms597ZDttQ/UJozwxWt:1O74D0bfVuPzo6DZDttQ/UJozwxq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776250724, "uuid": "2c6ac3af-f910-46ca-9fcb-75f23355b197", "value": 86746, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776250724, "uuid": "865e8608-0159-4b0b-9b54-639b1c025a97", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1aa4db0b-38bb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776251168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251168, "uuid": "17051443-d323-473f-bca8-902f25b7f313", "comment": "Malware payload", "value": "0ff99c8dd2bb8bfa416d904a3201796d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251168, "uuid": "6f1b1cd8-0852-45da-88ec-35aa68cd5696", "comment": "Malware payload", "value": "98b3d4579fc517348ffca0760c19b899d45071e4006222ff193ff5848fa808dd", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776251168, "uuid": "6b9a6db7-c1d2-4819-8d37-c6c91fed42a9", "value": "T1E7341383332A12C010C79CEB6A1746361E3B71AD6D2EF69B1D17D1F22CB069ED5591", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776251168, "uuid": "3b5155ba-6caf-49b9-847c-364d1a6e779d", "value": "6144:4TqBK+1GhPqyWRkq3dnnJN8q1M9ydCHA7PwMmuvb:4mx1GhPMRkqtnnz8q1QydC6wMZb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776251168, "uuid": "23898289-820e-4a67-9b5f-0c967fb12a9b", "value": 252992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776251168, "uuid": "d34eb200-6def-4bc3-af1c-5285a1083967", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b1d6869-38bb-11f1-bc00-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1776251169, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251169, "uuid": "1e15c689-de41-47f0-8234-b978af64f518", "comment": "Malware payload (AgentTesla)", "value": "ea6b386159052e4e0311ae8a81848585", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251169, "uuid": "229cf16e-43bf-4397-9a6c-f4b1bb07707e", "comment": "Malware payload (AgentTesla)", "value": "517ce010c5a304a7e1ba776c98b07cee6d2c39269cfec30d7da3b8c15d0c2b9c", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776251169, "uuid": "b4cc9b65-fe8c-46a5-81be-71d1ee374ff1", "value": "T1DF7434B9DA33C752C7D028C651B0A1942F11E48F11E4A181C576EF72BF6CAACA7C96", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776251169, "uuid": "b3a11139-fa7c-411a-906c-469f9c722236", "value": "6144:XN8EITMDDYxgZun6zns0TICsTbSgjGvLQI/umpBLfyIhlIcAOYk3irempqBUgXsX:dMID7ni7SgpmDfyIlsTpq5XA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776251169, "uuid": "c9e0a7c5-894c-44b6-8cfa-13c8d0377d16", "value": 355900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776251169, "uuid": "ee608e03-9b44-4cc0-8a8b-7fcd5f719b6f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0d64bd4-38bb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776251420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251420, "uuid": "0b4e8a12-78cc-49cf-acde-b699e48d4ef1", "comment": "Malware payload (Mirai)", "value": "f7ff8c11e7c9b2455bbdbdfc337f8e47", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251420, "uuid": "895e168f-249f-4b80-ba4d-93980cb229ae", "comment": "Malware payload (Mirai)", "value": "aa640ee976ff58f087abcd029c2ca2db1c6a4c56220a093b54f1362460fad53f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776251420, "uuid": "133c85f0-e41b-43ef-9c81-aca767dda53d", "value": "T15A1439C7F800DDBDF40FE77A84630915B530B7A210931B3B625BB967AD3619A0963E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776251420, "uuid": "ea625f2e-8097-4c6b-b029-9af904f6e492", "value": "3072:gelSVOIyIAz0+no6UJnnA3nabYbOUkpOjk/8wsqe1b2PjTudRFJ5lgsbVejbiqLX:hlnw4SYbOUdwzWb2PPujjgsgLM2yVHkj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776251420, "uuid": "81f324e9-9cd5-4e72-8ba5-13d4fe301da4", "value": 207584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776251420, "uuid": "2b25442d-7e91-44c4-90b5-15d57f142380", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b158c4cc-38bb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776251421, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251421, "uuid": "351ab4d9-bdda-4ae2-ab01-e46f94ecffd4", "comment": "Malware payload (Mirai)", "value": "72ad13b7372d4701efbd460bdc1cc1fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251421, "uuid": "1cbc22a9-e74c-4152-b15a-f7669ee5eb6d", "comment": "Malware payload (Mirai)", "value": "3a7a4b9fb87105d2cf16dfb1b69f106db82a6f75c117aa027841c0da8937ca14", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776251421, "uuid": "3d3e698b-93f4-413e-b6d6-052bd2f4e2ad", "value": "T1C873025547146CA7D8127F3C89E2CF65CDA69EB37EE8F880B9A8DF48CDD805509434", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776251421, "uuid": "a35aa61a-5e78-4ccb-a396-b295f57cfd4a", "value": "1536:9L8HfSg5E+i3MZ/MZdLgGn5tAMQv1ujurrqPWjSU0Eknbdvco/VJuZ:9LafSg5EbMZEZ9gU5KMQv1uCqKFMZZ/K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776251421, "uuid": "c8393a11-a7a9-429a-8f7f-1497bb815c8c", "value": 75448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776251421, "uuid": "7e466be4-bb6e-46bb-90d2-94dfa25b9c8a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a71fc5f3-38bc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776251833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251833, "uuid": "953cba54-d52c-4b4c-959b-c793220e58fb", "comment": "Malware payload (Mirai)", "value": "13d72fcb9a12701f8c8be0f1364d7227", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251833, "uuid": "19d54f9b-3531-4fa5-b283-183af59b5b0e", "comment": "Malware payload (Mirai)", "value": "6637bfe906ea4f693ee49e833691f0a3de69c8d0e46841e6c8d80f08af2dce98", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776251833, "uuid": "3a7ff99d-a5c7-4635-9f11-8ab9f0f5225e", "value": "T1F993121C55394131CB210B7B37DC07D978641EBCA42AF168D3BE0BA5664B8712BEAB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776251833, "uuid": "c0bf23b8-c309-4151-9f5c-7d4421fa5aec", "value": "1536:KZ4sJJH9Qt89F52Noju1dpSk47LBFGKLDctVlhKoS1LLy4nNu+ve4qsa7VbhUi:BMh9QC7u3pS7709wtLlnNuKuRhUi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776251833, "uuid": "f617aef1-2311-420f-934d-2b32a6a4095a", "value": 92840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776251833, "uuid": "070bf655-ed6b-4b17-94c7-bac5f30e585b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94a6d5b2-38bd-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776252231, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776252231, "uuid": "fa9d3eb1-9440-4b93-808b-20998757ce7b", "comment": "Malware payload", "value": "44f0f28a7bebfcfc12ec704cd5a3e6d7", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776252231, "uuid": "7dea2ca4-14e2-4db7-9137-e6408f4eb51e", "comment": "Malware payload", "value": "0f22955220382583ca5ea878dd091cab4e71a9cab6b8a9845fbef0469ac1d1f4", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776252231, "uuid": "231c5b17-31e3-482a-a07a-31276ac6cce3", "value": "T1885623366D95CE42E820E3F345EE06C03F3AA7694D460393A8D76183F1975E91F39B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776252231, "uuid": "ba01c0a9-2233-4090-957e-ef88ba984958", "value": "6144:yiEOKxBNNM9K8xJ3S5MTdx0p5CmQClqEiN2S94m+U1lLlrKt2LzwE/:vpUNuDxBSKdA5CElqkm11BlrKY3/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776252231, "uuid": "31c6ca72-5353-49fd-a23f-72bb109627b2", "value": 6271176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776252231, "uuid": "e1bcec50-6d4f-406d-be5c-da9126a472e2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "449d013f-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776252316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776252316, "uuid": "2e80180e-7eb1-402b-922e-30f3dcfd157a", "comment": "Malware payload", "value": "454c9bf6bdfaf41e58406b098e236dc8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776252316, "uuid": "9320057a-77da-49ba-856b-8426948ed104", "comment": "Malware payload", "value": "c0b1ac2a4e9df27794b10c8738057ba5476357bd5129bee50a2a1ab9f8183853", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776252316, "uuid": "cbb4a5ca-5c74-40ab-aa09-a673687eb8fc", "value": "EB531202339A297192714AF1E7FDBB48E64E3D588FF16C246C113D68F93239D5CC8909", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776252316, "uuid": "7c624a16-02fa-4a12-bbb4-2809dc4baed6", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxI:yYI0ARqw1qAEv7UIFM8oJorFquyj9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776252316, "uuid": "4f33414a-eefe-415a-a25d-8917af24da0a", "value": 66608, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15e96816-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776252884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776252884, "uuid": "6b188a1e-9fa2-4833-82df-a02d83c2605a", "comment": "Malware payload", "value": "99554a8313b0f99ebdaed9126d32bcff", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776252884, "uuid": "aafadfa9-4e61-4823-bbfd-83c18b406664", "comment": "Malware payload", "value": "2791990fec00623e0c62081b8145b3aa2d9b00e145a8880ff66fc4a025cc8e4f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776252884, "uuid": "f2f5ac74-3279-4222-9808-b44bc503365c", "value": "E953120223AA297196B14AF1E7FDBB88E6493D588FF66C15AC113D6CF97235D1CC8908", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776252884, "uuid": "5149f850-226d-4318-83e7-4295f95e1b1c", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8Px6:yYI0ARqw1qAEv7UIFM8oJorFquyj/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776252884, "uuid": "6ee9e8c0-c1db-41c7-a64c-8f36c75b04c0", "value": 63712, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c40b44da-38c0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776253599, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776253599, "uuid": "9533c87d-82da-4668-b14a-83cb1984c7b7", "comment": "Malware payload (Mirai)", "value": "da886c15f311be49e757bdf2cedd26e0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776253599, "uuid": "d280c7e5-3126-4052-a8e4-3de348316ba8", "comment": "Malware payload (Mirai)", "value": "aa5c63ec39366cb105756b548347f1fb0b546d683aef533abd37e2e90237c8c8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776253599, "uuid": "a2e54252-86e1-4622-bb8f-3fa032fd0aad", "value": "T15B7302BFD91A388FC767CDB8B5DD8016996C338266CDCBFC26974C4109A31E5242E1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776253599, "uuid": "caba7bf6-5b55-4b10-910b-6d120881b8f5", "value": "1536:zqhafLKcISOMVYuhThqFd+m+yi+87NcSOXaaMhfyVFpOkXJy4ZbdZR:zX1ISPYufadT+yiHmSOKXy3pOB4bd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776253599, "uuid": "faa29588-d3be-40f4-9899-c6a871f5725c", "value": 78868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776253599, "uuid": "98f2dbc1-0e6a-4175-ba80-0f35dc22405d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddb80169-38c5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776255790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776255790, "uuid": "f13241bc-3f7e-4494-9b3d-d8e5918e002b", "comment": "Malware payload", "value": "f622490a445cca999fcd1901ca83ec91", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776255790, "uuid": "889c409b-e878-4a79-b3ba-1e1f18f85acd", "comment": "Malware payload", "value": "dba9908f63f5f32405f7a728f37979e743814532378cabc4f0e9f24c34197c60", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776255790, "uuid": "c1768e88-2eb0-4a1c-ab71-654f38f4f160", "value": "T14686125A7D81DD29DB4B70B11691C4AF662907CAF015D01BCAA14D8A2C72F8E93C3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776255790, "uuid": "1ead8e0b-d806-4cb5-ad45-a7f61e0e82dd", "value": "196608:P/KhDTJBB3Bu6jXo66K5TzjHMdKr1vozCTOZrQV6az17/xZ66X:PeXrB3B7kHyHoKr1LKOVZbZvX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776255790, "uuid": "a3896a2c-252f-46e2-bf32-670e70184f22", "value": 8073801, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776255790, "uuid": "04ef8ad8-c56f-4a6d-bfc4-6ec01fe8c467", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82d42f3c-315f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776255793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776255793, "uuid": "8740ab58-403c-4713-8eff-2c6597fe9be3", "comment": "Malware payload", "value": "2cc1b66aa58a7c0192ea1c1ed87abf91", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776255793, "uuid": "c8db66ff-ba16-444c-96a6-94e944fae03f", "comment": "Malware payload", "value": "f492324f1e3fbce71145d12cb6c0debf50622fadddbbb8eb4b56293f5da89a53", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776255793, "uuid": "140b4282-cc04-471a-b23b-a1db3de0c77b", "value": "T1948601277D86CE2AD9AB61B351C281D7642A12DDA80BF02F07A04D855F71DCE2352F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776255793, "uuid": "1e30230b-7a09-4112-837f-fc504244052b", "value": "196608:YC+9M2MQqM1xuTh6ehfr3FXX/wQAyJWJ+iV:YBy2MhMjuTpdtfAN+u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776255793, "uuid": "0525895d-d09f-4abe-9121-b89f03e0f9e5", "value": 8095208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776255793, "uuid": "bf29725e-5b52-475c-821d-af1c9d729dfe", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68c0e4c6-26f8-11f1-ba1a-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1776255794, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776255794, "uuid": "09772872-b6cb-46db-91a8-e913139076c5", "comment": "Malware payload (RustyStealer)", "value": "def4f909eeed327ab949d99a810ff64e", "object_relation": "md5", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776255794, "uuid": "ba01d4b8-4be7-48ac-be41-1df12ff008f7", "comment": "Malware payload (RustyStealer)", "value": "b9f71ed4b08c93a7fc5468bee23660e3129e1cf9c84100d4d40ad70fb7c851fa", "object_relation": "sha256", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776255794, "uuid": "44039fab-8d18-4aaf-895d-ff425e9abab3", "value": "T118765B53F66290ECC16DC1B4831A6632FB32B88A073476EB57D086213E66FD06B3DB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776255794, "uuid": "0ef74f19-fe39-4ded-b9ca-6212e3a67698", "value": "c6968d4f1c415fa3e43f6c6377cd6b0b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776255794, "uuid": "ce144643-6cf0-4dd3-86b9-9adc71828020", "value": "98304:0i3Qm0vuJyIvFbWMVqqLKYhebCtjlKSObn+:7CpQvK17", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776255794, "uuid": "6a031a31-cfed-4ee6-8854-88af26f243ad", "value": 7608320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776255794, "uuid": "f88375fa-782f-4e2e-b61a-1945ee0642ba", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aeb99878-36c8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776255794, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776255794, "uuid": "8ae2f633-4231-4a74-aae8-b9e5b399695e", "comment": "Malware payload", "value": "cfa4099d42f87a980374026e1cfbe8a9", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776255794, "uuid": "88c6efc5-00d0-4e84-a177-599983f64a11", "comment": "Malware payload", "value": "202055dc11f11bb81e051e7b314e6433399d838676802fac479fe4a2b3924046", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776255794, "uuid": "e416ea59-5a62-4112-88d8-ea671c3cb0fa", "value": "T1E566F112FDC6CA2BDA6780B3E1C68267502A27D9B80AD03F47A02D855D75D4A43D3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776255794, "uuid": "da148bcb-bee4-47cd-a2ac-4523f54e846e", "value": "98304:pMXLjtQ5CryByCcMSaiKMAqcoArxoBx8JosjeYHrTg9hRtAdijORhHF1RLQ1eNRd:42LyCcMbhM1d+HjemMjf8iUHySR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776255794, "uuid": "fdf05aa6-44e8-4012-8d29-4a4092a1890e", "value": 7016308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776255794, "uuid": "6e9e1596-f356-4bad-828e-ad4f39faba90", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c37d6c8-22a4-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1776255796, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776255796, "uuid": "6934366f-8ede-42b8-829a-65c3b164249b", "comment": "Malware payload", "value": "f1705b79ff7e1bee779415c32a95fa76", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776255796, "uuid": "4c1e3216-36e8-43a9-b846-f47e6a4b88ae", "comment": "Malware payload", "value": "cf9bc0a3e01a7b466bc35dbf88563adf61c884ad5fb2b28afd1298a5f723f370", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776255796, "uuid": "f04028c4-fe84-4af6-9cf1-058bedf18bc5", "value": "T1E906E163EE9BC469EE6744B371C28242602A55B8AF0B90BE03D15DC54B73D8B0752F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776255796, "uuid": "a4fcab79-b2eb-4636-8035-33ee19c39ed0", "value": "98304:zLzEKRws9MEP+Zet2IxGG7CQW289MWndGleYj3VQGDBtM8rE:zLz39h2ZefoG9W28eWdISGD08rE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776255796, "uuid": "0694d0f3-c35d-45d3-9e60-fb760fde0f14", "value": 3735240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776255796, "uuid": "2c977eb9-a873-45d8-90e8-8c7c933004ae", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb8f8076-38cb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776258310, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258310, "uuid": "2110526e-9321-4979-8ac4-201f24a75d0a", "comment": "Malware payload", "value": "7a48bacd9bf92f361bad773aed9e3397", "object_relation": "md5", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258310, "uuid": "c076703a-7607-4ba7-b971-162ec4228e12", "comment": "Malware payload", "value": "63fe80f7b2210de6d2d56b1b3b6bc61e51590bbee91a15ef77d991d7a9ca4f8d", "object_relation": "sha256", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258310, "uuid": "6635bcf7-ce65-40e2-8755-89cc4ce35191", "value": "T18D418383F60BDAD02D6363E28292B4BCC5028186151244153FFEC44DEB73B68C79D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258310, "uuid": "bfbe47bc-356f-4974-a418-e98de27fcc43", "value": "48:X7OGCN9BZ6NNdAAoE85d34ayjcbOOGKo+njRSf+Ao:X7O1CjdALE0341jcaI/jRY+V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776258310, "uuid": "63886153-eefe-45b4-9a0d-ca48f2f72d90", "value": 2349, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258310, "uuid": "ecb8cc68-2952-4b13-ba9b-440b840104c8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbb90370-38cb-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1776258310, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258310, "uuid": "bafa43a3-17da-4a23-9460-ef2880cf4f06", "comment": "Malware payload (ConnectWise)", "value": "3a022f9cb3252c75b3c8afb474fa7997", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258310, "uuid": "751b4d7a-a11d-4a2d-8c07-1df6621eba5e", "comment": "Malware payload (ConnectWise)", "value": "51acbd2c6429c059ab63b23ad2a756d31396f8c22ab034cb7f0e8931b94b89bc", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258310, "uuid": "ed2f7952-dd2d-4c51-b04f-4f2b757088d9", "value": "T1EC05E01077FA4A3AF5F31B32BF7A91505A7ABD669E21C15E1698312D0DB1B80D6B03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258310, "uuid": "5e36f019-ec81-4e39-88f2-eaefa7e2b026", "value": "24576:/hUVI37syvkWgvnwcmnNUU+GG27hhx5F0NM8:/hUVI3MtQnG2lL5FqM8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776258310, "uuid": "4278043e-529c-445d-8598-b033ecdb64c0", "value": 828928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258310, "uuid": "89006b46-8bd1-4472-b118-63aec3d321e6", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc256c43-38cb-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1776258311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258311, "uuid": "1c7a6153-c098-4502-9503-9e0e72175a67", "comment": "Malware payload (ConnectWise)", "value": "7cdb2bfa6691dd01df8ed0f254a70d63", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258311, "uuid": "5c172f74-f814-4046-8c48-09cd47752630", "comment": "Malware payload (ConnectWise)", "value": "90a701b03fa0adc946424c7994fafaebbb2e7b4719321b4bdeff965ab977925f", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258311, "uuid": "39541bcd-770e-492e-8126-b99e9dd6a1db", "value": "T1AC65011172E6843DE6F61B32FF7A96215E79FD229A30C15E9394390E0D70AD19BB13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258311, "uuid": "98735b57-7722-4f9d-a127-7782efb7208a", "value": "24576:Led07PGt8MKpSTJinaS0oAPzUffc5LK+oBqzkXatkZdy1B5MAnUUGGu+N2B9urh0:KDt8bSliaS0qajtkZeIAgGuQ2BK1g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776258311, "uuid": "ebf2b3ec-fbcc-478a-9446-303b0af4817d", "value": 1507328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258311, "uuid": "71109f0a-42c0-4fa1-9d03-3d4fd82d41ac", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc5a3cd4-38cb-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1776258311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258311, "uuid": "a1ffdfbb-c5cf-472f-b151-aeb9952392b7", "comment": "Malware payload (ConnectWise)", "value": "f89e864d8e19eb4ce78117265a7b572c", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258311, "uuid": "7e698fcb-042f-41a0-b313-2a64cee4726b", "comment": "Malware payload (ConnectWise)", "value": "2648d53e4c8ac63822b99f2b79a80770e2c2c33212232bde298a6f08d1a33d49", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258311, "uuid": "39921891-509a-48fb-8f75-6001add69de5", "value": "T19295F13136E4C039E2B21B35E93A92F15E79BD24DA62C05F43643D1E7971E809AB27", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258311, "uuid": "cabe5c2a-7e2b-4834-99df-ced0f05e6e5f", "value": "24576:5NGryn8Y2KWeNXPKPC+j/4TkfVub1emjS4t3nHRRlUhWMUUGGHpYLgmdF8gu7ura:beyqkXSPkYYb1rSuRlUIXGHpYLgSL1g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776258311, "uuid": "84c86198-e7bb-47a2-a91c-475b97dfcb65", "value": 1888256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258311, "uuid": "6088b145-a12c-4c22-adbc-9f63e647b191", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf4871c6-38cb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776258316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258316, "uuid": "214bd726-234e-47f4-acd8-967447e302e2", "comment": "Malware payload", "value": "cf89a5ae4b2524ddeca4103ca36bce22", "object_relation": "md5", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258316, "uuid": "864663d7-aa47-4056-80d3-2685d0238e07", "comment": "Malware payload", "value": "825a190ffff4de5a9d74d0908e463d45188533b9af1b21d8037c67062f94ebba", "object_relation": "sha256", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258316, "uuid": "8eafd288-701a-48de-bd16-85a142e561c3", "value": "T1E65165CBEB0B89708C87818493D560798557E2EB8E6349413FFE941CEF037286B556", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258316, "uuid": "5f818fd5-9c99-4ec1-9ae2-b02d178b3e17", "value": "48:Nspr9R/d8kA8pozkABgz4iw69YBEpEupaJeXE2UAUA7:Ns/RlV/pozk2gz4iw69YBEpE0aJe02UW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776258316, "uuid": "cc641496-eb82-4442-bfb1-4bdd9fa8bd95", "value": 2561, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258316, "uuid": "26943907-ab6b-4c57-bae7-9d719247f538", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf9f877e-38cb-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1776258316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258316, "uuid": "636d15f7-5c8b-4dbf-8aae-c7cd6ff1d908", "comment": "Malware payload (ConnectWise)", "value": "3e573f4670898a35fd39d5d430c96748", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258316, "uuid": "abee97ab-afcd-4bf8-a87c-ee27cc1b983b", "comment": "Malware payload (ConnectWise)", "value": "52addbccf07f023efef348bbd8c74dbc588f65ab2ddb69b9e676fa0b768c0b99", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258316, "uuid": "518bb31a-fa7a-4c3a-8be6-75a856a8d85b", "value": "T11095F13136E4C039E2B21B35E93A92F15E79BD24DA62C05F43643D1E7971E809AB27", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258316, "uuid": "12d93b69-3d6d-41ca-93ba-1b08e8ccbf14", "value": "24576:RNGryn8Y2KWeNXPKPC+j/4TkfVub1emjS4t3nHRRlUhIMUUGGHpYLgmdF8gu7ura:jeyqkXSPkYYb1rSuRlUOXGHpYLgSL1g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776258316, "uuid": "af90e139-d863-4401-ac4e-c31dd4ec3748", "value": 1888256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258316, "uuid": "3eb10f62-1a4a-484d-be8b-992115dfdda7", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c02c65df-38cb-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1776258317, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258317, "uuid": "7d28bba0-ad4b-42f5-a43c-c267194d2f82", "comment": "Malware payload (ConnectWise)", "value": "b86393cdf59d4b569fd141000bca4b29", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258317, "uuid": "7cdd3feb-6aa8-4b7f-ab1d-2a23de766a1d", "comment": "Malware payload (ConnectWise)", "value": "0584a4d9b81532aa96c0fd45d8cd4afe67c473bb65a02ca3770d1e3e9ec28073", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258317, "uuid": "6687c24b-6168-4648-910a-22c7e35a4eff", "value": "T18785F03132E9C139E2B21A39E93A96F15979BC64DA23804F53747D1E3970E8096B37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258317, "uuid": "7a653615-1fcf-457d-8bb1-1e5d414209a1", "value": "49152:MHU5PpiTE7gLqTlrs1GLM7RGVozXGHvZ/NTHMu1g:UU9pOE702rs1ouR/GPZ5HMu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776258317, "uuid": "f160de84-df1e-4a3f-91fa-600a6220f73f", "value": 1871872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258317, "uuid": "b18fede5-e8ec-4d14-a734-6d07aa9b1fc1", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0309894-38cb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776258317, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258317, "uuid": "03da0a34-3675-4b7c-ba34-3043c3db60d8", "comment": "Malware payload", "value": "3336006e33b338dafa21a779861fdf44", "object_relation": "md5", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258317, "uuid": "386adb3c-072e-4ef5-9ad7-30f888c47bba", "comment": "Malware payload", "value": "56f023236d70796f55143817bee693bffed1d8a9c346effde5efb3f148d8cca4", "object_relation": "sha256", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258317, "uuid": "d7d4905e-3b9e-42c6-b4b3-0c0440496177", "value": "T1705196CBEB0B89B08C878184D3D560798567E2E68E634A413FFE941CFF0372867956", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258317, "uuid": "a9b19527-b4af-4e15-a519-8330dcec66b8", "value": "48:Nspr9Rl/d8kA8pozkABgz4iw697BEpEupaJeXE2UAUA7:Ns//lV/pozk2gz4iw697BEpE0aJe02UW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776258317, "uuid": "9a9ee21c-6cbb-4382-bdad-dab891846544", "value": 2560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258317, "uuid": "9359d127-a0b3-43ee-9e8d-85a4f22b8d8a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0a8a3bd-38cb-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1776258318, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258318, "uuid": "c704f9ad-055f-4ca8-848e-69c7a4f38be0", "comment": "Malware payload (ConnectWise)", "value": "4218a7f1cde2a075b731c83e115c21a6", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258318, "uuid": "c84445ae-044c-4907-b4fe-e28450d6cd44", "comment": "Malware payload (ConnectWise)", "value": "3bb89515ab455a2c8f2918903d34a2cd48704c66f24cfbe85c97cc097bd3b364", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258318, "uuid": "8b6064e9-c95a-4135-a081-42ffc0cc7c15", "value": "T1FF95F13136E8C039E2B61A39E83A85F15979BD24DA63C15F83647D1E3970E9096B37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258318, "uuid": "111f76fa-56c0-4952-8f2a-0e196a66686d", "value": "49152:z/czgQ52NHC7eFc7339O9JHAzYqWXGuaYzr2G1g:zigQ8NHzc79O9lAYqqGNq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776258318, "uuid": "c359b0f6-b194-41da-a209-1bac881985a9", "value": 1884160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258318, "uuid": "00eb8d72-31f2-4681-b71f-e8d1aaf987f7", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0b9d3fd-38cb-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1776258318, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258318, "uuid": "54fa765e-0280-4965-b55e-dffa3d6a0b2d", "comment": "Malware payload (ConnectWise)", "value": "8d730236807bcb3b5e5dfcf9b0467dc8", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258318, "uuid": "acd3a41d-eca6-4abe-ad53-4bebf9bdf3e9", "comment": "Malware payload (ConnectWise)", "value": "67ce3a585c7bc978400957070670c70502d8deb4e4c6b583894e6c428489cfa8", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258318, "uuid": "dd3fb451-d12f-4729-beb8-d98abf0d7e67", "value": "T10285F03172E4C139E2B61A39E93A92F059797D54CA63815F93B47D1E39B0E8096B33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258318, "uuid": "7ef34075-7ac1-44b6-903e-b8b4a38253aa", "value": "49152:oKCp7lczCEZxsLHBwgYL5IdXGuNQiC1g:RCr4Z+zBi5IFGWQiC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776258318, "uuid": "58b0ad9e-04b7-4fc2-994f-d5faf37bc716", "value": 1859584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258318, "uuid": "04b19b0d-b61e-4ab2-b745-c004ef3c4a1d", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0fff68d-38cb-11f1-bc00-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1776258319, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258319, "uuid": "c12c5c72-b866-4fa1-9239-f044b3046289", "comment": "Malware payload (RustyStealer)", "value": "cf100c69d1de551da6707dac64a0dd93", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258319, "uuid": "26e3bdf7-20bb-4523-a36f-33042569467d", "comment": "Malware payload (RustyStealer)", "value": "4e14ef27a32eaca0ca88fe17e65ad0a88a0fd47d2ba7aef196b3f2c4b48aa06e", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258319, "uuid": "75f22189-ccae-4708-8f94-a04044e26be9", "value": "T190364B21BA5A95ADC15AC474C3478A729A7174CF0B31B9FF40C492783F6AAF42E3C3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258319, "uuid": "0a41900a-5081-4c2e-9e36-71350f0ef370", "value": "9d437bc71e95142f3bc4991d118f776f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258319, "uuid": "e90e798a-786d-463b-9cdb-1da553086397", "value": "49152:TfoAON6pZNmsxZ77pqFYZqiNx/3r9FGdkDyb26KrYF+9jFOOuAObDFlqilZG09cw:Dn78efDNxJrNg7XG09T+0y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776258319, "uuid": "4ca7bc7c-cba7-42ee-84b0-16555a027fc0", "value": 5261312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258319, "uuid": "6a8aa4a0-4cc8-4365-82d7-78a5896b4b3b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86b907d5-38ce-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776259509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776259509, "uuid": "40727588-6e10-472d-9539-3232fcbff153", "comment": "Malware payload", "value": "7ccaa512ced04b1f26dee1660f4877ae", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776259509, "uuid": "2093241d-3f1f-4940-8600-311e19ce7670", "comment": "Malware payload", "value": "08dbae976f26cfb6798757032306c712a71676108d2a4356248e771c0f654dd9", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776259509, "uuid": "b56b80a4-859c-459a-8fa4-4a6d311d0884", "value": "T1563412199BC081F181FCF8FB95A279346BC3DD94AAB7A6751ED38B0C0D98016B45C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776259509, "uuid": "c0713881-3f6e-4c21-aad6-fb60ad1fb883", "value": "6144:LM/I+lDO5GRWdlAdxpeZvwx6vgoamV2OHU:LMNMweAdbeZ4QgXXEU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776259509, "uuid": "bd99f407-3dd4-4694-8aa3-4ac6f8e507b0", "value": 252992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776259509, "uuid": "56520139-481d-445d-9a96-631db164bda2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86eaaa6a-38ce-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776259510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776259510, "uuid": "608dfdbe-0f61-4ec0-88a3-2d33a53db2e7", "comment": "Malware payload", "value": "deac5082bd048f9a6832707a02d2c22d", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776259510, "uuid": "fd496f97-e32f-4992-8907-3a19b0de89c3", "comment": "Malware payload", "value": "95869e995a7f042d1678d3cdbe4c1fd1baa7c316d3e17e026ab1f6ae96a0ab9c", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776259510, "uuid": "87d00621-f978-46ce-b702-3b6975403ad9", "value": "T14884013299BC5EDAC81FAC2243941055FCFC06F79C2C6564AE8351BA4E66F66F838C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776259510, "uuid": "7ba78d60-dc80-42a1-8e02-0ecffb6e55b4", "value": "6144:H8ZP9GfSpmKpVithvf95GcykKVNjY3L2MFMar2EuVC12sL9sloB9hnawZBKtWtCE:YPvXVitl95b7KHMkVC12s2Onj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776259510, "uuid": "c4c109d3-169a-4716-8ba7-3ba37e2bea8f", "value": 381268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776259510, "uuid": "d1b3e1e8-a7f6-4dac-b618-e78457d9fe97", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c29d6ee4-38d0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776260469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776260469, "uuid": "a85e99c3-c836-437c-8f75-64a69275ab1e", "comment": "Malware payload", "value": "8784e703367e71f040bbc5f43243c2bf", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776260469, "uuid": "d842f394-edc1-4de9-b729-298e956f55a4", "comment": "Malware payload", "value": "10044d6a9f313b03248d0dd6cbedbf9c8fbe361599d41334b7b045decf45655b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776260469, "uuid": "708d2ccd-9939-4e68-ab77-f3f56ba233bd", "value": "T1A8B533BDB8AFD1F6CC6F5356B131711DC1A5B2BB88763102A0FAD5026CCDA489DB8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776260469, "uuid": "ae3e244a-ab18-4f78-8bb8-b773227b8798", "value": "49152:Nd06RBg5HHuF9qPU0SXBZ0tAc7y83l8AuAjtYhznuOkoufKhjp9sFLbHjL:w04uuVSw6c7n3GAuYtROkVihjqbHjL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776260469, "uuid": "cb83c224-504d-474a-a30e-9102bbe342e7", "value": 2393536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776260469, "uuid": "80e1a9a8-e073-4abd-9daa-b003a8619a7d", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "447069c2-38d4-11f1-bc00-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1776261975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776261975, "uuid": "9d2c354f-0073-41f8-b2da-9715901009bb", "comment": "Malware payload (AgentTesla)", "value": "f282057410bac9c3c96e5686dc4ce877", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776261975, "uuid": "92c1e0c4-4dae-45d4-b7bd-059da1fe8dac", "comment": "Malware payload (AgentTesla)", "value": "bf70216afcd00c6f444061bbf8674f7e87166e7e78864621442f178903cca262", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776261975, "uuid": "b515007e-0b19-415f-9f11-51a933fa0875", "value": "T1BD3622A2D8DC3CE4D46B54B52CBAF740321DEB2D98695E45BE7BB42984224973033E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776261975, "uuid": "fa7b8316-a87f-4000-aa66-b00aed675cc0", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776261975, "uuid": "60d00a5f-88b7-4ac0-a188-df4e539be475", "value": "98304:ZAZtchLjRzhlvUv1dOPpFSmyKv81iHm8F8JulEorW/:UtchRVyv1GXqKvtHTWJuCor6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776261975, "uuid": "1a8f01f8-3b27-4180-8d32-30206e06fc64", "value": 5222912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776261975, "uuid": "a3946b9d-12ec-44a4-bd2a-82b96260f96d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31ec84de-38dd-11f1-bc00-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1776265810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776265810, "uuid": "cfb47065-4fd2-4346-8283-f62c986f5cb0", "comment": "Malware payload (NetSupport)", "value": "98479543a0dcd8f85348fd44a7324536", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776265810, "uuid": "390f8702-b6d7-4037-b21e-811cc7945fe8", "comment": "Malware payload (NetSupport)", "value": "bd03b89a90c9a144dff3ea4baf5f1d96744f6c39634a59a7fea05462edd8f6ab", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776265810, "uuid": "88ae1d02-63b4-4c70-a245-eee352123aa1", "value": "T11D064B0BFCB98CADC09AA23484336157BE65BC401B7163D72AD1B6682F737F0A875B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776265810, "uuid": "ae2d57e1-802b-4907-86b7-c6b9d1bc8ee7", "value": "3271ee162568f50a6810be9b8973807f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776265810, "uuid": "5f705c7d-eed6-4d08-9663-58482a51d5c6", "value": "49152:jNkYEstPSHZ1iaONSM1DNV5NGugTks4O93jIQch25284:jNrQZpksJ1T5I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776265810, "uuid": "4edaaf51-3836-4b41-a8a4-75c0df2f6c13", "value": 3890696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776265810, "uuid": "6b72888e-7236-44d0-9846-5dc04352f95f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb7be90f-38e6-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776269986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776269986, "uuid": "77a4b109-72ae-4b14-8c22-bed5a088de33", "comment": "Malware payload", "value": "9d6019fbb612ff4eb50fb075d6fad836", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776269986, "uuid": "a74413d3-265b-4ca0-b9a0-4a99706d079d", "comment": "Malware payload", "value": "06bd12f30c464c8b2e20b98d41f56c286495822d6e53ec56c10e8909666dde13", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776269986, "uuid": "026af98d-675a-47ef-b48b-09316c7b9d4f", "value": "T1EAC3D7ADB2E27035439334A5157F410AE27B5E543C4B8290D17AE9D5AC7CE8E813BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776269986, "uuid": "79876110-f88c-40e6-a12b-aa88980e2a6a", "value": "1536:l3Wm72ZVmkgBe6uwSSgMg/lxhx6ctYtuolHAEbA9wbu3meUvKLonobQasySb5Zba:H72V9wJg/+ho9jpsyudPpIlqu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776269986, "uuid": "9abc726b-55b4-4f5e-b0fa-d15de85217f8", "value": 122132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776269986, "uuid": "420e1f51-98c0-4bbe-8a57-b9b1a88a6f42", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ea5e1ba-38ec-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776272381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776272381, "uuid": "d634f423-978e-4a9a-a3eb-33776f987a2d", "comment": "Malware payload", "value": "69ec66a9affd44d92634b068ad138de0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776272381, "uuid": "93e59e76-32b1-4258-be90-1e1fb48eb63b", "comment": "Malware payload", "value": "bb12c06382d1bee9f5a60df4a361d8ef1bac1e3e27ffb2ade260100dc2283cb7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776272381, "uuid": "20745905-80fa-4252-88f0-dd60431381cb", "value": "T11F931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776272381, "uuid": "ead6fd07-b7f6-4c0c-a86e-3fa66d095629", "value": "1536:nByp1tF/uwMmAIa14oXoKIMepeV7tb73WdxCrCitkb5fv2v05xLkrJKv0sCxKroh:n8iIL0GitkbFv2v05xLkrC0sCxkoIy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776272381, "uuid": "0ffe6597-c0c9-4f45-86b7-d493e4fac6c3", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776272381, "uuid": "3634a89f-0bb9-415e-b78f-4dc8e8ac88df", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca171e9b-38ec-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776272507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776272507, "uuid": "134a9b97-c9a3-43c4-84a5-0ba667817a52", "comment": "Malware payload", "value": "9244423820c9cb6058ebcac04805a365", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776272507, "uuid": "e5fb87c6-ce40-4359-b4ae-2375c9270fe6", "comment": "Malware payload", "value": "12639f9ee025f50371dba751f8a74a7c958e573f3b99f1ecc535a5aa5653c0da", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776272507, "uuid": "a8585dc3-72ba-4745-b6bb-bae1a2ba1389", "value": "T1A793E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA523895F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776272507, "uuid": "47db7516-704a-4bdc-8d36-5582339c41b6", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXLIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776272507, "uuid": "0748e90e-c266-4fd7-b91f-54f90d576f1b", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776272507, "uuid": "d8d0714d-254f-4a09-a2fd-4d594163af69", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f8c83cf-38ed-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776272731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776272731, "uuid": "47535fd4-59b0-4895-ab70-900d54e2ba8a", "comment": "Malware payload", "value": "9751a14f7aa5a4dfd613551f017ff84b", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776272731, "uuid": "405154b0-4604-443b-9b8b-3ec7d5f6b445", "comment": "Malware payload", "value": "3bc2a88ae6e94b071f9b445c437cd0fbb1362bf64554fca96c89b70df2d86c2f", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776272731, "uuid": "f3d2b9fa-4c9e-4a63-8a45-6b314eeb6bc1", "value": "T1FB52FB7DC9E1BDC4475B22D079DEBBC6019E8B137A6B1B6CF5CC00910A442A9EBB91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776272731, "uuid": "18f3b5f8-b604-45f0-a27b-d92d9a3201b9", "value": "384:wsjp4OoIMLw/PfX+ccX4fWcZO7fUYyDhVna6LVESB:fLo9GfcX4ZO7fMr17B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776272731, "uuid": "f10ff712-69eb-4c41-a8db-d18f0748e74e", "value": 13404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776272731, "uuid": "ed260b28-ba9f-41c0-b51a-e51177375311", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ce2235d-3823-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776273729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776273729, "uuid": "4c91cedd-5805-466c-953e-8f25c163b2f5", "comment": "Malware payload", "value": "732eb4c2c37d4ae07350c8b2c77882e3", "object_relation": "md5", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776273729, "uuid": "f6c446b9-33f8-4df7-a6e3-27c7165dc2b5", "comment": "Malware payload", "value": "2e9338feb1b56d1da46cddc5013570812236b9ea5f860d16f8d1c18ac08d7945", "object_relation": "sha256", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776273729, "uuid": "12f31e35-7016-4140-a675-a9e0a774256e", "value": "T11BF23B487B98C22BDBAF0E7D75621A50167196621203CFD53ECC64EEFF937058612B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776273729, "uuid": "63eb82ea-5a93-4b07-863b-a4ddb8d8a43e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776273729, "uuid": "5ea1b067-13bb-43f7-a6b3-6066063228cf", "value": "768:DmQZqx1lYcTYbFyf8qiIQljnbaoXbYC10kow:D0lYiiIQljRbPow", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776273729, "uuid": "10906a82-b9dc-4d15-a355-faec8cad8ef7", "value": 36352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776273729, "uuid": "45f3b7ce-712e-4947-b359-8d60547a3dd0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e45cffef-3646-11f1-bc00-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1776274214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776274214, "uuid": "1c3244a7-6b11-4d86-9eb6-33dc3bd86f2a", "comment": "Malware payload (SantaStealer)", "value": "1f7aa3a0425d198ff16df8e903d56aac", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776274214, "uuid": "be4b1b64-8168-4ce4-b4c7-a76972fd2952", "comment": "Malware payload (SantaStealer)", "value": "ea28b85e97fdfe77335e8625586212f0df64ceee15c8290d17b75e6096694d81", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776274214, "uuid": "5e55bc15-dee4-43b4-aac5-0efbd94c93fc", "value": "T16DC5029F31E62069F9E83330D47577B60ED2BD8A78E49E8CC694552C7E0D02D498E2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776274214, "uuid": "2038c5fa-5ce8-4f4b-869f-d9cacd64f82c", "value": "f1d840d6eae17d90e2995a85b3633177", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776274214, "uuid": "5bf969c5-578f-4c22-bc59-ceaee6272b03", "value": "49152:i795t5WNFN8llgHKWmBNzD+CnySA88RvCEOV70eM1VM6Wys:i795vWNP2lsV+f+CnW86CEOVEDjWy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776274214, "uuid": "23d75ecd-e1c9-4d6b-9d2e-fe1228afd8c9", "value": 2696704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776274214, "uuid": "21d7a8c1-e079-4d71-bd17-efce834a60cc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2a70b84-38f1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776274642, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776274642, "uuid": "97b67b88-47f8-4f70-819a-97ecf2badef7", "comment": "Malware payload", "value": "6ae809b6081c12026de85f44cfba4b2f", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776274642, "uuid": "4d85a8b9-e274-48e2-8a5a-42646f981f8a", "comment": "Malware payload", "value": "402303b0a4e2c959d18d3d9da44794016f389ce812cb23cccc1dfdc04db0796e", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776274642, "uuid": "6078a008-63d8-441a-ab3a-ba24bfcf326a", "value": "T139F54913FCA119A9C0AEA23189669252BB71BC491F3123D73B50F7382F76BD0ADB57", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776274642, "uuid": "34a25af2-0c97-4c25-b91c-836bf6a02e8c", "value": "49152:6nLsSR90f2zdSAf2IlpdsteDDHdP5ES3vSEDic/:6LjWuhzcCrl5a6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776274642, "uuid": "494a22f6-f3a5-485e-88cd-c54a7da40984", "value": 3473592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776274642, "uuid": "0eaa33a8-63a3-4ad1-89a9-ee8c8cff27c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee689c2a-38f1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776274716, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776274716, "uuid": "e9acfcab-3006-4fa2-b17f-e7797e4b0027", "comment": "Malware payload", "value": "5dda179baa48670bda7decc699087a22", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776274716, "uuid": "397ee0e7-b29c-4b8c-a836-26de691f9bfe", "comment": "Malware payload", "value": "517bb47881a853478d331cfd7c6c1399a81b2cb53f3b4fda1eb1df2998bebe4e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776274716, "uuid": "6edff75f-7c8d-4f58-9390-45efc892aede", "value": "T19B8308327588582A210B428FD263336C70FFD8E2D611E5B6F6F922344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776274716, "uuid": "9d61aa5d-94be-4065-83bc-ccf0cf56956f", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbn4WaUVN/:XEKltp9t2SX/yr2pb4WpVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776274716, "uuid": "10acd463-ba96-4871-9faf-19425057c50d", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776274716, "uuid": "8d30825a-c30f-4a98-81bb-ee691564e4ec", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dcd50be-38f4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776275815, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776275815, "uuid": "078208c2-0abd-40d6-a986-452a7114c0a1", "comment": "Malware payload", "value": "fd4547636601289b5b9c1d713ab01816", "object_relation": "md5", "Tag": [ { "name": "01x02x2026", "colour": "#7782a1", "exportable": true, "hide_tag": false }, { "name": "clipbanker", "colour": "#5efbe3", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776275815, "uuid": "b3e36e77-1e64-4c38-a0dc-ad0fb0cbd744", "comment": "Malware payload", "value": "7b5393d8d7a7a6d1edf9493edbbb5f0b037206ee254c47a25530705c75838a62", "object_relation": "sha256", "Tag": [ { "name": "01x02x2026", "colour": "#7782a1", "exportable": true, "hide_tag": false }, { "name": "clipbanker", "colour": "#5efbe3", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776275815, "uuid": "9f290f9f-654d-4b68-8824-eaf8748280e2", "value": "T124745B55B6A40CF9E967823CC9A34A06DBB2BC560771E7CF03A046964F277D09E3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776275815, "uuid": "19bcd14b-e156-4324-b642-6ac9a122f62b", "value": "d04feef9f2f0dd0a18187fe3826aaf2a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776275815, "uuid": "9eebe917-fcd9-4746-8a99-116bfa36f408", "value": "6144:DJHT55FH7YlvSzzcvgY+MFbnHTfXDt12CKNNHQB/a:DrGIcFHFbnHj72tFQha", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776275815, "uuid": "3afdb841-8331-4e41-b48a-3008ef1395be", "value": 344064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776275815, "uuid": "c3edacae-7913-435c-91ca-3eefb482c94b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73c9b247-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776277087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277087, "uuid": "e946cb52-dc4a-47de-883b-78acb77c458a", "comment": "Malware payload (Mirai)", "value": "c5edc097f27cde64b022f0191bd774ed", "object_relation": "md5", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277087, "uuid": "426ad0e0-adae-4dc7-9df8-43789958c674", "comment": "Malware payload (Mirai)", "value": "3683db3261e884f2b7cf7622c1ba519a6bf1d71527a1cdc53b4214102cfd5665", "object_relation": "sha256", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277087, "uuid": "f6153668-95a5-433a-8a47-68aa8e730e01", "value": "T1F9B39DDBF2871161C89246F007CB4BAE3E2323C15F178AE73C69667969751DF8902F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277087, "uuid": "62bf96d1-3947-4cd9-bcf9-e1a31c664334", "value": "1536:QhmlPOHh1bhawTY+jSprkfxmW1toNK04gGnO/LWh:amlGHQwTY+jyMxhoNK04gGnOq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277087, "uuid": "bcc32960-eb38-40b6-8317-78a47eebf114", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277087, "uuid": "f17f2a18-26c3-45b3-88dd-ed75a276d513", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73d2d323-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776277087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277087, "uuid": "1ee52117-1788-40a9-a72e-c7e96a52d8c8", "comment": "Malware payload (Mirai)", "value": "b2da80604c17212168cd1942b036f69c", "object_relation": "md5", "Tag": [ { "name": "Boatnet", "colour": "#ba2b39", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "mips.", "colour": "#b8bb5f", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277087, "uuid": "711338f6-952b-418e-b56b-db43494ecabc", "comment": "Malware payload (Mirai)", "value": "718670c5321b57dc37c5df9ecf1adb771d8b7bd7fcae36d9b65ffa7e22bb9d9b", "object_relation": "sha256", "Tag": [ { "name": "Boatnet", "colour": "#ba2b39", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "mips.", "colour": "#b8bb5f", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277087, "uuid": "f33516dd-472e-4001-9267-5fb0ffe659a3", "value": "T102D2D1FC431A179AC688C0B663A812983BF2177AF0AF8C8D3565C54BDC885FA6D477", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277087, "uuid": "600ac649-1f35-42fa-a539-3d8acb873af0", "value": "768:/ACm3crFuJ0BNUXE+J1W4/b8hqd202QdJgGlzDpbuR1Jw:4d3V0G38WbVJuG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277087, "uuid": "395b439f-e1f8-4177-8b44-b2254ad7bbe7", "value": 30472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277087, "uuid": "7e979ee1-7aab-4af5-bf8f-205ffd96891c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73ddf84f-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776277087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277087, "uuid": "f98f9490-1c58-4c5c-a824-288a9326681e", "comment": "Malware payload (Mirai)", "value": "11f70e88de06f1e198c2a98119fd16af", "object_relation": "md5", "Tag": [ { "name": "Boatnet", "colour": "#ba2b39", "exportable": true, "hide_tag": false }, { "name": "cnc", "colour": "#96ec5e", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277087, "uuid": "c49da5ac-25b8-4986-8ba1-b76d02f7bf93", "comment": "Malware payload (Mirai)", "value": "cc7403766bac8f5b480e377ad786f2bdaf182cca8450626a014b43857e4dbbe9", "object_relation": "sha256", "Tag": [ { "name": "Boatnet", "colour": "#ba2b39", "exportable": true, "hide_tag": false }, { "name": "cnc", "colour": "#96ec5e", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277087, "uuid": "69e68d5b-d2c2-4845-a5e9-cb103637ee21", "value": "T1278192D939A24179D8BA149F31BA7448B0969BC173C57F5C59CC39F2828CE072F61A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277087, "uuid": "2e612bcd-a1b9-456e-8f38-31f620bff3b8", "value": "24:ItxCGbxBH2ikx8csyxpPQxH56xvBixJKibtxOi3xH56xnKujxVrcxI0IUIhxAdA9:inEJ0SSfHPKR0Od9hRTf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277087, "uuid": "a30ea69e-c4e4-4429-871f-c39028109d58", "value": 3982, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277087, "uuid": "2fafb854-df9a-40c7-abd1-9d669ae837c8", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73e178ac-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776277087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277087, "uuid": "38f372f3-efdc-47dd-84bf-9b07f1ada87d", "comment": "Malware payload (Mirai)", "value": "6c943d7c0b118fb1b1884541d43e32a4", "object_relation": "md5", "Tag": [ { "name": "Boatnet", "colour": "#ba2b39", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277087, "uuid": "fc9192d9-568d-4d6b-b4fb-46d040555e55", "comment": "Malware payload (Mirai)", "value": "865612726362f9134dfb9def80fa6adf79e1ab123e033ad3ce91d103c2b93dae", "object_relation": "sha256", "Tag": [ { "name": "Boatnet", "colour": "#ba2b39", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277087, "uuid": "9dfe9dda-26ee-4eab-93c4-eea6154bcd99", "value": "T1F0C2F1E4246921AFC081427A912D0DF7B0713AB49423B6FDAB527CFDC59B57CC13E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277087, "uuid": "c5f6f396-6aa2-4618-bc4e-ff4a04d41f4b", "value": "384:MpKpIDb1DFUbrJhFKU3g2TSl04dWthWtItcn/XdmXSSa6G52l9ViAziwWC1ehbB6:HIrjU3slz8hWt7/tmiSrl9XiWYhbLA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277087, "uuid": "f4d4471f-7ad1-4175-a491-5bb4e0a971d8", "value": 27812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277087, "uuid": "6fbd108a-f38f-4471-b846-a21b73eb0a29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73e62a9b-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776277087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277087, "uuid": "90dcbc57-3796-4ce5-ad89-b4eeface57d4", "comment": "Malware payload", "value": "b2c85e12c003bfa1e6a725071dbe1a72", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277087, "uuid": "0caea5c8-71fb-42a6-8f97-07d0863b3c88", "comment": "Malware payload", "value": "c03eed16fc03200c480b0c86a170a1f77a32fab582ff8571b7efbb63df8d9611", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277087, "uuid": "0707f9eb-774d-486e-ac6a-94e71fcee711", "value": "T194F0E109BA70F25001319A25DEF2E89DFC9F40AB542373042374CB159F3512E8B151", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277087, "uuid": "af7476de-62bd-4321-b9e7-34cd1c52c3d4", "value": "12:IaDIB9RE9AEyPq25f0dap9omFAHgQe76gvLs:DDIpEuEyd0d1mF+jQ6gw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277087, "uuid": "b5cff599-3ae7-4c8f-b659-fc923f4a7ac1", "value": 575, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277087, "uuid": "45264cfe-654f-4967-9e5b-2ab35261a770", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73ec010e-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776277087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277087, "uuid": "5983b410-f732-481a-93db-921ed4b59329", "comment": "Malware payload (Mirai)", "value": "0ac1adfab156c91f3cfc2f99cdc14185", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "i686", "colour": "#24db2b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277087, "uuid": "f0a21f97-03bf-40b3-becf-151687936929", "comment": "Malware payload (Mirai)", "value": "a90d8a5e0a902201adb3acb34e7e6efc9df68edcda58a824892ba3ba34406e54", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "i686", "colour": "#24db2b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277087, "uuid": "5602cf9b-a178-4c5f-9918-578e635adc00", "value": "T17ED2E19892D0260BC4E78B3DC32D58FE50B598DC130BDBC262EEE6401D4B15ADF7EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277087, "uuid": "c0adda45-0307-4c11-9554-76a7ea6e6f46", "value": "768:BnZvT1iw5z24QOS9CrBNHghbIXUjR8jaayJWycs4ef3ofb:BZbYuKyLrBpghDjR6cTFfcb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277087, "uuid": "d9cc0538-fbc3-4b7e-8491-74a9e3046a33", "value": 28684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277087, "uuid": "28fbd148-775f-4f78-b87c-2e2c898856d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "983f731d-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776277148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277148, "uuid": "c175eace-bb46-4a19-aeaf-d1b80b7bfc6a", "comment": "Malware payload (Mirai)", "value": "9df9a4d62250ea8ea8ddcb0ce066e04e", "object_relation": "md5", "Tag": [ { "name": "arm6", "colour": "#cceccb", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277148, "uuid": "89d8b239-80fe-46a2-a784-029cf01b7d79", "comment": "Malware payload (Mirai)", "value": "4a7d72ef1717b586826ab439e5aa4bfe568ff9eac7513e051bc95503ad0617b9", "object_relation": "sha256", "Tag": [ { "name": "arm6", "colour": "#cceccb", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277148, "uuid": "b786de70-7c88-49e6-80ff-c7d4339d2bcb", "value": "T1F0F2F236F64386C2CA71083EEFAFC4CAA7474BB1C4AE38366889D6391961307D5247", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277148, "uuid": "433bb7c9-6116-4831-baeb-1f845be68b04", "value": "768:hEWuV9QrPjpnzsoK2poMTfM+U9l1HZ4FFFSO5aolNL+E9q3UELTe:0w13KkTX6DHZ4JXDKL6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277148, "uuid": "4a4df77f-b66e-42a9-b04b-81e3cdcf9341", "value": 34312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277148, "uuid": "adbcd0de-054d-4d0c-8b2a-82166b8b25e8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98512a19-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776277148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277148, "uuid": "681f1b73-6753-4dcc-a487-3c0e2403984a", "comment": "Malware payload (Mirai)", "value": "032264f69f7509256f7a8370fe180c66", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "spc", "colour": "#ef98c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277148, "uuid": "491dbdf4-04ec-4de9-8d5d-971418cca49f", "comment": "Malware payload (Mirai)", "value": "5ee10c1171820fb8c0945ad17f018724e55b87c36ef84b1d0e7fad05fd402251", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "spc", "colour": "#ef98c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277148, "uuid": "857710d6-3023-47be-93d8-947d779af4e5", "value": "T17E632B21BA351E17C0D4647A21FB5B19B2F196DE62A8C61E3D710E4FFF21A406943E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277148, "uuid": "88191d21-19da-42b9-a178-ec135b6c33cd", "value": "1536:3aRh4MjrNUzgXXvcxbmTK3FVjDC4UinR75SYvtt4nvvZ:KtNWFbnRVjH4J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277148, "uuid": "cc626302-506f-4cd1-b0be-a5ddcfcff7ea", "value": 67264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277148, "uuid": "f9fadd99-afb1-448e-bd52-7bbf8f1f09bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98548819-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776277148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277148, "uuid": "a873ce2b-01c4-4bf9-8daa-b7eeed1ca852", "comment": "Malware payload (Mirai)", "value": "936f8b58ae4593e209b454eb07a2e206", "object_relation": "md5", "Tag": [ { "name": "arm7", "colour": "#5a1c73", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277148, "uuid": "fd23efae-11a0-4e01-b920-d3489366a306", "comment": "Malware payload (Mirai)", "value": "00a7036fecd5c4b42887ce28b961573c1e0449ce233e7b3f70c3ab0801fce089", "object_relation": "sha256", "Tag": [ { "name": "arm7", "colour": "#5a1c73", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277148, "uuid": "1293f3df-b405-4de5-9ca4-0b4fea6fe70b", "value": "T18543F116D1356EA7E3501C7694AD1146BF22DEB9B5BD213B23180A1E3F80806EF5A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277148, "uuid": "2eeca935-f0a0-4e87-9ffa-b36a72362de6", "value": "768:+oY/HEtFo3q6QsaGOOWPNRV3w4B2qYPWqSZ9q3UELeHbBXw7I0xQAZCkrdBrBSY3:+oMn3twOQ5gGCLGNX/iZCEBryYjj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277148, "uuid": "6351961f-524f-40ce-a76b-96050bd05f9a", "value": 55276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277148, "uuid": "1ae4a674-b189-4c4e-ac7a-027d1041cb9e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "985777e0-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776277148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277148, "uuid": "d050c1a0-ce57-4ca7-93cc-0734cfbb1519", "comment": "Malware payload (Mirai)", "value": "705d9238c5392d99b15ea15eec221ca2", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "x86_64", "colour": "#8e3094", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277148, "uuid": "aa0ee668-dcbb-4d91-827f-2b34f8e66e95", "comment": "Malware payload (Mirai)", "value": "33f87d33a21d54fec8f71afdb953d7304f70b8cb5083a494e3235d661535f1a5", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "x86_64", "colour": "#8e3094", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277148, "uuid": "09abce4f-34c5-4413-a36d-8de53368e127", "value": "T116D2E1898A1E65F8E9E70139C147B37E6CC3AE40FEC82B8428DF353647D1C65A065F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277148, "uuid": "9721b0c1-03a7-43a5-8ecf-89f043a3c0c7", "value": "768:baajh00oaZnvH2dbW+iawlnFMjMWqvMkNgwFSFiPmGsM:+G60oaRUiaMF0qvMkHSFiOLM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277148, "uuid": "3ea57f21-f51a-48b3-a956-f79703d0f301", "value": 29940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277148, "uuid": "64a0bffa-d69e-4c1f-a64a-e973145b87bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9857c132-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776277148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277148, "uuid": "fd83ac02-93d6-4748-8a71-990c2969ce95", "comment": "Malware payload (Mirai)", "value": "3eaba6380b78d529ca5009837abeb816", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "sh4", "colour": "#d7d89b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277148, "uuid": "301127de-9c2c-455a-8a3a-db22997ba5f2", "comment": "Malware payload (Mirai)", "value": "d7cc3955a69e3b15acf8198c4b02e12d1394bd7cb41ffa7da30137c64efa56dc", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "sh4", "colour": "#d7d89b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277148, "uuid": "bab19f58-8153-4320-ad46-502154a955fe", "value": "T158438D3AD4296D54C0964574B4AC8F351F23E0C883536EFB2AA983B96453DADFA01F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277148, "uuid": "563b33a5-80d3-436f-90ea-e6aff57ca682", "value": "768:QakzqAuHqHXSt7qQLrTfpXkb99Z7XdsCs07PK8OHIavoWlknSTC6blJIfmNhSwuI:QaC2yCF/9W7XdsF0K8OHTAW5TC6hNJu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277148, "uuid": "18013701-a8e2-4ab1-abd3-1647072ebb25", "value": 58676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277148, "uuid": "564b3c1d-b774-4def-8bd8-c6ecaa7a6a66", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "986ece84-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776277149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277149, "uuid": "b520cbbc-753b-4943-9778-0b67083975f0", "comment": "Malware payload (Mirai)", "value": "d458f8ec3893275bd3c08326d4fc7963", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277149, "uuid": "99baac42-87fe-4ec1-8ac1-6ed8040be2d7", "comment": "Malware payload (Mirai)", "value": "f97471ccab2827c00dd55db72c93ad97a1c01f9794e033180ea84e63d573ae44", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277149, "uuid": "026b82da-a490-4986-9ede-48071d431968", "value": "T1B2632ADAF801DD7DF80FE6BA4417090AB93163D142830B3767ABFDA3BC721A55912E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277149, "uuid": "84c6c14e-df34-4cc8-abca-adcbfcc666dc", "value": "1536:52AyqkBwxq8ZoBsaIBmq2sY5SieciIJ0O:5AqYwx64m/sM9J0O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277149, "uuid": "496c284f-4466-4615-bff6-6bdf9a549e11", "value": 69060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277149, "uuid": "9cc61e49-a498-47e4-96cd-d4a5fc0e227b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "986f7c77-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776277149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277149, "uuid": "c6fb96c2-c6ba-4b84-8702-4869efc6d77e", "comment": "Malware payload (Mirai)", "value": "82f2b58bb1290d51fab8563283437c6d", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mpsl", "colour": "#53e137", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277149, "uuid": "8cd8a5ce-2ceb-4aa3-95ba-c9efdb70ab02", "comment": "Malware payload (Mirai)", "value": "7222ab2e8a0bd799919644f318a078686ee3e447524add479626c20425b6a809", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mpsl", "colour": "#53e137", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277149, "uuid": "45e0edbf-b401-4bda-ba77-11a5fdccd7cd", "value": "T172E2D06FE8BCF946C9BD8474418D03698E44B4C2323F9B089760ACCD6A5DE17B5AD4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277149, "uuid": "1d0d63bf-ca75-485e-b738-701e4642baad", "value": "768:9J1P1TBwNMennf+L7MveSiqGE00l6Btr+f+aWm:9DhBwNMofk70TiqGCYryf+e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277149, "uuid": "94882a33-2cf7-45f7-81bf-993f5b49c9a0", "value": 31572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277149, "uuid": "9ef7514b-1131-416d-8694-387dde92beac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98703f5d-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776277149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277149, "uuid": "f642cbc6-354f-40f1-afe9-5269073c0ba3", "comment": "Malware payload (Mirai)", "value": "591fb7d669cd04f336d5d43d04614dd4", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ppc", "colour": "#c6d8f0", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277149, "uuid": "a75b1695-b920-44f0-8574-e21f8726f212", "comment": "Malware payload (Mirai)", "value": "09eefc7212485cf37ffdc1b8e5663015feb435ee78ffcbcdb5009afa8cc74d63", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ppc", "colour": "#c6d8f0", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277149, "uuid": "ca4d17ff-fcba-4463-82d7-4e2a3ac0f7bc", "value": "T11CC2D138F4423DCFDBA2B8B01CD2EAC697772F8F2A614DC297919B70465654256D0B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277149, "uuid": "97e281bf-765f-4990-978d-053bc217ad8f", "value": "768:47ZgG5QPFUwzAc1hI+wc8yzbUOIn4uVcqgw0906n:oZvucIhff8yzAOc4u+qgw090y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277149, "uuid": "20c09570-8ec2-426a-94df-f8b7afea7a3f", "value": 28100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277149, "uuid": "3f98cbf0-21e7-45c5-863d-0342e2d6a666", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "987f5e5d-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776277149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277149, "uuid": "1a219bf0-3cfd-41f7-881a-8b378aac0a45", "comment": "Malware payload (Mirai)", "value": "f3b575fad948fd931938aca84411905e", "object_relation": "md5", "Tag": [ { "name": "arm5", "colour": "#3ad44d", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277149, "uuid": "3fd845fd-7f10-4986-b764-41ab3e1a5aa4", "comment": "Malware payload (Mirai)", "value": "5ba1a20fe6849666cf833244c9bc34c1882b3c9879a6f63949e990c10eb7a176", "object_relation": "sha256", "Tag": [ { "name": "arm5", "colour": "#3ad44d", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277149, "uuid": "dc33b2ab-b993-40f0-a0f1-6fb0dad824ae", "value": "T14F82CF101616BD63E8348133DAA8C9C7679F5DB8C6FA33E132400638E6224A791FDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277149, "uuid": "e6e4896f-5a1e-4d9f-bf59-4229fec5a5c0", "value": "384:NjFEcxjeFOQi9bc8mXG0mjTqqUOb35GefPfidhymdGUop5h72pa:4i9Y8mXGxjTVUOTfPqds3Uoz924", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277149, "uuid": "ca8370da-5b02-4fa5-8d40-1375c6bc78cd", "value": 18280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277149, "uuid": "67046aa6-be77-44ce-be1b-7ac877e2b1db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c38dba5-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776277155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277155, "uuid": "558a1a1d-41e6-4fcd-bf0e-2716136c97d6", "comment": "Malware payload (Mirai)", "value": "570011c82cfaea3329ba5895717b728b", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bot", "colour": "#9258e9", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277155, "uuid": "4f5bd669-3a57-4cab-8173-11c902765e34", "comment": "Malware payload (Mirai)", "value": "03a87400ee5bb9777560b965d9337d1c0c727634e0f1248c725e378559482cf5", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bot", "colour": "#9258e9", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277155, "uuid": "c69eac28-9595-4020-b3af-2a25891380dd", "value": "T1EAD2D17C78149A80E9F514361435D2DB3F632AF8E2D93A7B6120676C39C79190BF8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277155, "uuid": "752664cd-acf7-4bd3-a967-ce2404b7075f", "value": "768:H0beLCMhEsL8aAuqRVCB38PRKXk2cs3Uozm:H0iv85PumZwrzm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277155, "uuid": "38376e73-1867-4256-a0e4-c3f1964a4ac7", "value": 29636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277155, "uuid": "fd308f7b-1dbc-4d09-86a8-c67a6283f1d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d86cb44-38f9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776277989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277989, "uuid": "41554cb3-c585-4bf8-9eee-fc295e938c56", "comment": "Malware payload", "value": "b786a03600b1ed306a30fbf9e8aeb323", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277989, "uuid": "ab984e1c-d0ff-44b1-9d1b-6ddac9540265", "comment": "Malware payload", "value": "daa5b14308e7dd2628e8dec3cd6063ec54a4a91ef3badc478a2b903183ad9524", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277989, "uuid": "778f460d-2203-4aad-a510-06befa460e33", "value": "T16DB42369227F71900C7543A94B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB195638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277989, "uuid": "e9e4e35e-4635-43dc-94b3-4ffaaf843938", "value": "12288:c7JZAaFpenqO3g/ALyYG0ZaDajTCXMO8xzDOe3WU:YLpeLA/f0Za6TCXKBxmU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277989, "uuid": "0f91f8fa-244d-4cfc-ae7c-ab30ca7604fb", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277989, "uuid": "20ca93c9-fbf8-4c42-a547-346dd67d4095", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8da51c94-38f9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776277989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277989, "uuid": "399e905a-5efb-48bc-9cc1-7eadb506e0ba", "comment": "Malware payload", "value": "fe44af7bedafadaf9dc1916b8e282b3b", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277989, "uuid": "5515b844-7ca4-4c1e-8a80-b5985c8fb77b", "comment": "Malware payload", "value": "3497c26e8abe965ec52212234aa10456ae530a572a524c0544a7aaad06396a2d", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277989, "uuid": "0810254d-b57d-4855-b931-ef42aa8a5390", "value": "T16FB423CCB6CB88CC15A63134E6A24B4154DBBF33B2DF7391B4B849700DE6A6710297", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277989, "uuid": "1e6b479e-bbd4-43d6-881b-00d56e259e88", "value": "12288:gwsK8MG1KnyC/G76u6M0gXar5qduzct2ien3P+bem:gKGcGmuwjrQen3Pwb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277989, "uuid": "d6e92a8d-225a-44a6-aa3b-e6271c323125", "value": 515391, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277989, "uuid": "e5fc3851-4f68-4959-a4db-fe532b0a755b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8de2e3e0-38f9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776277990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277990, "uuid": "f329381a-4415-478c-af1c-135974693efd", "comment": "Malware payload", "value": "2b0b0855498b3b200becf3bdef4945bf", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277990, "uuid": "b8c39445-14fe-4f0f-8c6b-8e6a9bba056d", "comment": "Malware payload", "value": "5ba04dd7166507b87123dd279589377f987d9ba23f3de9d5a124b935a6c25189", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277990, "uuid": "64d40df7-7b71-484d-8093-40047bfeeaa9", "value": "T11BC423692755F0C46206F2FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277990, "uuid": "a13857f4-0ce7-4ed8-94fb-fccbd4559e91", "value": "12288:YA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWBSFyorOIic/7MPs:jm6Jj6ESfUxZ91kmY/99z8AFXicTj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277990, "uuid": "8d2684e1-5d21-415d-a8e8-7100cba94faa", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277990, "uuid": "d7a79db1-7d64-4739-b120-91bea94508e6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e0e55de-38f9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776277990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277990, "uuid": "6e25a192-a9de-4bff-b1de-a1739d047b9a", "comment": "Malware payload", "value": "11b00d35606ee9bd9d947402a2894cae", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277990, "uuid": "0269e5f3-32aa-49bd-ae7e-a7c475cb549c", "comment": "Malware payload", "value": "7ffe416617da0f897168c453314f27c0a0bffd2ddd135349d3c810b7e10f1853", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277990, "uuid": "d9b11da8-0217-4c6c-821e-6936cf9c3b48", "value": "T1FFC4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277990, "uuid": "8829ee7a-cd43-4cf7-8aa4-7535abc21c72", "value": "12288:H+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byEH9I1P0QKw6FEe:H+QqldA/TSO713u7xnEH9IaQKHj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277990, "uuid": "f9c5368e-8b7e-4ae8-b452-eb30ae0ed8f0", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277990, "uuid": "d74b7047-3d63-4c5b-ae6f-8869eb8f412f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e3f017c-38f9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776277990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277990, "uuid": "5a42e93a-50a4-4450-acf4-b4e10a585236", "comment": "Malware payload", "value": "f93abb3511b433590c7a564da111e8f9", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277990, "uuid": "a679cda1-bcc9-43f6-8a0f-e458f0363d26", "comment": "Malware payload", "value": "413e8d0cab1430b4cfcb50ce8aeb8ef1cc39fa7cbb8274006e7586eec62c1c40", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277990, "uuid": "3b73bbcf-4551-4618-bcbd-7ad50f36e7e0", "value": "T1A7C423792755F0C46206F2FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277990, "uuid": "b8e0afac-3643-44ab-84c9-89795cf0864c", "value": "12288:eA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWUSFyorOIic/7MPN:Rm6Jj6ESfUxZ91kmY/99z8BFXicTq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277990, "uuid": "7001ed85-4daf-4cc9-ad3d-5659bde228a3", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277990, "uuid": "b39dab26-ac03-4f2c-889d-6fbc41cb85c2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e466b92-38f9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776277991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277991, "uuid": "7949f703-69ac-4f67-a70f-c0d7b5afcb33", "comment": "Malware payload", "value": "fb27f8ef617463ae3812bf3b81bc8af6", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277991, "uuid": "6febe19e-1cf4-4eb9-9891-3ad31ea8d1a9", "comment": "Malware payload", "value": "bbd824cfd3675ea12d92ebf26a937d1c6fdf95e51042639b25f382eced9c19af", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277991, "uuid": "e3dbd97f-d79a-41bb-adbb-f441f4a7fe3a", "value": "T157B423CE5A286CAC5BE85E834F5DBFDA2DF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277991, "uuid": "298c5dcb-c21f-4533-9be0-fc5b7a9d1d18", "value": "12288:lGRl4nbDDGIabs/7iiEVwYg2l3/2NHby+wK8J:5Tabs/7iiWw0K2xJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277991, "uuid": "518d7373-c515-4d64-aa0b-1c4beaafc387", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277991, "uuid": "5c00cd8b-d5c9-491e-8cf5-19cc2dd1e332", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e808201-38f9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776277991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277991, "uuid": "3e4ae1b8-2a5e-464c-a05b-d7fa5b17c0d5", "comment": "Malware payload", "value": "0d8655be6670dbc18587a3cee660dab0", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277991, "uuid": "b30c8db4-c922-4a6e-ab18-5bc0c2e216d0", "comment": "Malware payload", "value": "86c4a5b83bcecedffb7554f311c5562b37127fd4fed1fc36495134ed2d0079f3", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277991, "uuid": "008b0a9c-207c-46a7-8053-f2b891eb989d", "value": "T134C423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277991, "uuid": "ef443445-691f-4e7f-9d71-a3c8a10379a5", "value": "12288:FeA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpW3SFyorOIic/7MPUP:FRm6Jj6ESfUxZ91kmY/99z8CFXicTVP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277991, "uuid": "489d5258-c8b5-4ef5-9255-77dca36549bd", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277991, "uuid": "454ad5cb-5ef0-4c7b-b7a6-793b9f0bb940", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee7ac5f-38f9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776277992, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277992, "uuid": "6302e6a1-70ab-4db1-999a-736c0ba8b6f9", "comment": "Malware payload", "value": "b2a5878b3c6928dd448b6847ad7c3ef2", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277992, "uuid": "45997557-6621-4cb4-afda-77e3950213b2", "comment": "Malware payload", "value": "42ed6c2f4163a6d698456a0c54b2f4c46c3ac74e6d945b3d9ba57792f1aa18b6", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277992, "uuid": "d7285ddb-06b5-456a-90c4-938027aaa0b8", "value": "T115C4235D7018EB38E507A134F312C0F26BAE662BE0A5C39CD044053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277992, "uuid": "25291e8b-9755-4c5e-9de6-71cf3092940e", "value": "12288:1MU+0xq75aS9iYIp6cP/G2Bku8ytNvC28c5/VTUPkYyv:B+J71vI/GEYc5/pP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277992, "uuid": "eead8606-8fe7-4208-82e8-41b69879f97a", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277992, "uuid": "149f718c-045f-444c-ab7d-5556c29dd677", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ef0e477-38f9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776277992, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277992, "uuid": "e6a10621-4bb0-47e4-8ad5-470fc333673c", "comment": "Malware payload", "value": "4bda6d91bafc9e9395f1fea6aa1f2beb", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277992, "uuid": "be893a5a-010c-489a-8af2-5bc29fd0ebcd", "comment": "Malware payload", "value": "176402eac85b2b58d83bffab0c91b3dcee6617c5a8418ac6efdffaf5d5e94c40", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277992, "uuid": "ed3a85cc-d749-4b70-bf37-e828e318d787", "value": "T14EC423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277992, "uuid": "397e165d-28a0-4610-b437-f20b76de8995", "value": "12288:UA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWdSFyorOIic/7MPw:/m6Jj6ESfUxZ91kmY/99z8cFXicTz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277992, "uuid": "6b579102-68dc-42aa-8fb5-70b24d857430", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277992, "uuid": "39aa8500-7122-46ac-9bd1-850e48fef7fc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f170d68-38f9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776277992, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277992, "uuid": "d3947ea4-cb73-4067-8c58-8cbb665844a2", "comment": "Malware payload", "value": "b6fd22c41ea508bbdbd3bb48b467b22e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277992, "uuid": "8ee4f4cf-975a-47e1-b224-fff0399f6dbf", "comment": "Malware payload", "value": "91c4a91eb77cad2c205af80b6cec36b9f580021a639d389faf3592837e2a9e4c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277992, "uuid": "e3e84cb1-925c-44f2-aec4-7d6dbd94d682", "value": "T1F3B423CD64BED4A87B658DDA9FDCBFD30CFC00366D7526F2A61C1A13A1C400B64A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277992, "uuid": "ece758a0-6f47-4780-a311-6c4524e16fb9", "value": "12288:ZB/e4pqNFTFbEXkrDoGbDDGIabs/7iiEVwYg2l3/2NyD:ZBm4pgTBoGTabs/7iiWw0DD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277992, "uuid": "903a5402-a809-4ceb-a317-3fdc78777d0b", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277992, "uuid": "3801ca05-2c0b-45ea-9f94-5eae7c34a2a3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f820aad-38f9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776277993, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277993, "uuid": "ec8b4061-7a3c-4c8b-9e18-6335322698f2", "comment": "Malware payload", "value": "17388717a26a64d5c51efcb18cedc3bf", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277993, "uuid": "b0c4677e-5ddd-4aa9-b845-c665b3749ecc", "comment": "Malware payload", "value": "321ffdd7c2fceb20ee372cd156f5002f41ffee1966bde915e01054dabd759f3e", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277993, "uuid": "8f9d8ea7-b766-4321-bf09-bf99f5fdba5d", "value": "T1FEC4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277993, "uuid": "d0749d38-db0d-4326-baf0-ed180cf395da", "value": "12288:L+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2bykH9I1P0QKw6FE6:L+QqldA/TSO713u7xnkH9IaQKH/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277993, "uuid": "6140f79a-d11a-451a-b63a-1dc41c173ea7", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277993, "uuid": "0ee93a1e-0d3a-4fc2-a919-0a5d1086c05a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f89c6f6-38f9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776277993, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277993, "uuid": "b7e2d05c-ef8d-4c0a-909c-5367d4445084", "comment": "Malware payload", "value": "217ee6476e5521fe5628cab6d625e9a8", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277993, "uuid": "28c2ef81-b637-47cf-851b-8b6c22d5a2cd", "comment": "Malware payload", "value": "b0dfe57e1be8775c581bb2fa96e3081e91d355820e4978322186de78e069446f", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277993, "uuid": "ce8e8584-bc42-49ce-ad04-d24acabaf3c7", "value": "T175B423F5A7606BCC9D20122F2F4A2BCE19274B41B403C54A1AD2875A421F6FF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277993, "uuid": "774eb590-05f0-4240-803b-65eb42c00848", "value": "12288:qBRdpQ73iBVYWiCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUZ:qHUw2Wz9XgbM0azTHiQIouDN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277993, "uuid": "9eb845bc-e63e-4a75-b313-ef9131ac34ca", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277993, "uuid": "2daabacf-cce7-42cc-a1de-4da1feeb1655", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8fa226e7-38f9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776277993, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277993, "uuid": "8933bd5a-c055-4669-9a36-cd8ca679db55", "comment": "Malware payload", "value": "01ef0f253dbe368a7298224beb95dc12", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277993, "uuid": "5d867cce-ecea-454d-80e9-016b1d7d1bf2", "comment": "Malware payload", "value": "2286046d2473b627b7ab30234aa6d096c34e8a5e99cc1c4809433ae0229427db", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277993, "uuid": "a0022010-c183-4dd7-aa62-61f42e82ec06", "value": "T10B55338B817D28C08F7E0BA777FB815C62204EFC100208A73A575597793E79F8A69D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277993, "uuid": "817ac016-aebc-4e53-a9b6-e81fa10e0393", "value": "24576:qoZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRaL:qoZ9bq+MmMEL+hcjXHC/wnwdaL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277993, "uuid": "64f042e9-95c0-492d-bfe2-2a6f49d97c36", "value": 1386178, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277993, "uuid": "560aa335-7c90-4dc6-ac93-771c22006ab9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9046689b-38f9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776277994, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277994, "uuid": "6176aa73-8f54-4382-8a58-7c78955a612a", "comment": "Malware payload", "value": "56cac6a97759e1ea384c361d082e0a93", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277994, "uuid": "e6f0bfdc-72f4-47f7-904a-31f4b91c86c7", "comment": "Malware payload", "value": "7c951dc27b4c3b476d3181d94d9945129acf3451e237d4279a7d20564b7df791", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277994, "uuid": "5afb03fb-b661-4c9a-bb88-fad0411d43f7", "value": "T109C423692756F0C46206F3FC828CBCD886EF14F98B9315BAC90FA545F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277994, "uuid": "f3090017-9788-4f3d-816e-7d0580e1dbd7", "value": "12288:+A7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWMSFyorOIic/7MPV:xm6Jj6ESfUxZ91kmY/99z8pFXicTG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277994, "uuid": "b8db46bc-e8d5-49ee-9182-a983e0fe873e", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277994, "uuid": "a68c5d3e-d95e-47b0-bb82-0ab0dfb70607", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "907da3cc-38f9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776277994, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277994, "uuid": "78857c1a-7d17-4b93-86ba-76110d292069", "comment": "Malware payload", "value": "fce6b191e3f98ffc15c134b3894aa94e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277994, "uuid": "a9d565c5-ca4c-49b5-be4a-8596c881f0a9", "comment": "Malware payload", "value": "1677016140c13a60dd8ff2839b2c004cffeff6202038cd6fb5c2ab603fbaa763", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277994, "uuid": "e2e6e54b-9330-447f-9f7a-90eb51dbfd5b", "value": "T158B423CE5A286CAC5BE95E834F5DBFDA2CF8413FC62411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277994, "uuid": "72ce5763-8a71-4c2d-b50c-4fce7eead6c1", "value": "12288:7GRl4nbDDGIabs/7iiEVwYg2l3/2NHGy+wK86:DTabs/7iiWw0KBx6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277994, "uuid": "e2156144-301e-4fcf-86e6-d6f95ede2c10", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277994, "uuid": "c44fc750-3ffb-419e-bc1f-b424c47621fa", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90a5082d-38f9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776277994, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277994, "uuid": "8400173f-f9bd-4fe7-b4f3-ab0676a31128", "comment": "Malware payload", "value": "cb21f3a0243f99c5824d330a52aa155b", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277994, "uuid": "5373088a-0f4c-4b69-9255-192f94064981", "comment": "Malware payload", "value": "47be1d006a8f9667df4bc58c7adcc9a5457bca91c843328d2b277592e67ea58e", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277994, "uuid": "fa0a7b62-f586-46df-92fc-7bbb0810baf0", "value": "T167C423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA545F456267BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277994, "uuid": "3cd1cf49-03ff-4432-a938-e68d5dc5f40f", "value": "12288:2A7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWySFyorOIic/7MPn:Jm6Jj6ESfUxZ91kmY/99z8zFXicT0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277994, "uuid": "1d35ab24-a5d8-446e-aca9-d7b71786feb3", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277994, "uuid": "5099660b-cdaf-4640-b1ff-2544d36a43d5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90af550f-38f9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776277995, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277995, "uuid": "1b267bb6-ef39-4459-960d-fbd9d5bc8f94", "comment": "Malware payload", "value": "2e61dff6bdad74402b6ccfc360405de8", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277995, "uuid": "41dbc0a2-9953-4c62-8bfa-601b809bc8b6", "comment": "Malware payload", "value": "aeb7dcbe90757aba4e5bf6568ff2e905c9b0adf1db38735baf9ce6a566a9c7f7", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277995, "uuid": "0c46274c-54e0-41e3-b4a5-fcf949fc3b99", "value": "T19FC423792755F0C46206F2FC828CBCD886EF14F98B9315BAC90FA595F456257BB220", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277995, "uuid": "0c2c90dc-4ff9-4827-b2c4-ae2d48d45f3d", "value": "12288:OA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWMSFyorOIic/7MPV:Bm6Jj6ESfUxZ91kmY/99z8pFXicTy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277995, "uuid": "2f8b3b78-da7e-4011-9b0f-f89dc70e1013", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277995, "uuid": "fb8ea809-d189-435a-a65c-dfcf8fde6549", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90e0efc8-38f9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776277995, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277995, "uuid": "a99950eb-a422-4a48-82f5-59c15b9b34e1", "comment": "Malware payload", "value": "312d3d63c3ed9113bd026916cae7a816", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277995, "uuid": "7e3bece4-148f-4462-b791-cd6820e6c240", "comment": "Malware payload", "value": "010af090c300e943106c0a53c077904fae52215329c4ec79710e737c6ab8c5c7", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277995, "uuid": "61e73cae-23ea-438d-8667-8fc85fd3e92b", "value": "T1E5B42369227F71900C7543A94B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB195638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277995, "uuid": "00ffd6a0-d419-4178-be27-d5b9953374a2", "value": "12288:m7JZAaFpeRqO3g/ALyYG0ZaDajTCXMO8xzDOe3W8:+LpeBA/f0Za6TCXKBxm8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277995, "uuid": "8f910f73-421e-4e96-b093-3783c6b88d73", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277995, "uuid": "c434e604-1578-4aea-af6e-3952de4725fe", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91364643-38f9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776277995, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277995, "uuid": "98673766-2311-4910-88c0-28ba34fe64e9", "comment": "Malware payload", "value": "d6332fa0ac25d3354eefa857d26fbded", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277995, "uuid": "82fc4141-7b62-403f-863c-c89a427da114", "comment": "Malware payload", "value": "59d472406fb37c77ec0c846fa7e4872b5471736926f391b98b3c49b43cd1ad01", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277995, "uuid": "a3c2be03-92f0-427a-b729-7f3d77a1731f", "value": "T1F5C423692751F0C46206F3FC828CBCD886EF14F98B9315BAC90FA595F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277995, "uuid": "272c789a-c814-4fc8-a85a-273b2d8ba45d", "value": "12288:IA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpW1SFyorOIic/7MPI:Tm6Jj6ESfUxZ91kmY/99z8EFXicTj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277995, "uuid": "b8eaab1f-f6e8-40d6-8395-bd384763c592", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277995, "uuid": "cd1164df-5d96-4611-9cc8-1b3e8be93262", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "914efdfd-38f9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776277996, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277996, "uuid": "b006831b-5136-4795-9564-d7f0fa9c8441", "comment": "Malware payload", "value": "8c12eef79bcc2d93075dd4e3bac1eb8c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277996, "uuid": "cb2e8727-bde7-4ab7-8969-4de0cffe069e", "comment": "Malware payload", "value": "b5ad0cd77da7e2f58f63e0aaf5d210ebb0086e08fed352f63110db947d92240b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277996, "uuid": "3d7231ec-ffe8-4267-8598-0386fbfa7cec", "value": "T1CAC42304340741D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277996, "uuid": "60253a02-87be-479f-bb01-6a35f92053fc", "value": "12288:/6wlOMWROC/FTeHo22Qm7NzofOr68mUeA924EwC6:H4MQOC/gHozN7NzomW8OA9J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776277996, "uuid": "9f3b3094-d097-4cf2-a044-8a563efbc918", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277996, "uuid": "bf5db163-103c-4573-b433-9f886f226593", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c911fa47-38fb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776278948, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278948, "uuid": "daeffe38-bfee-4cf1-9979-f47990d98c85", "comment": "Malware payload", "value": "ba20d9e38251d926ed2420834c38829b", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278948, "uuid": "b3c908e5-205d-4de3-a6a2-7a02a59ba3cf", "comment": "Malware payload", "value": "5a0ae10fe4a1c1ea8fa6c055d30a1504252ac92e29e767fda209100453549ba9", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278948, "uuid": "37f672e1-1c19-456d-86d4-89e3fe5f33cf", "value": "T1E3C423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A9C9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278948, "uuid": "49639c4a-0bef-489a-87e0-f32ff21516f5", "value": "12288:wyBXIs7rM1ocqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5I:NImQ1gEA/f0Za6TCXKBxe2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776278948, "uuid": "b72b876e-c75f-4591-8381-c5878ae9dbc9", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278948, "uuid": "3e3ad4f4-d410-46b6-8c31-23afe947fd4e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c932b221-38fb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776278948, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278948, "uuid": "c8e9b35f-d9e4-4d58-907c-0dbcaa06b585", "comment": "Malware payload", "value": "bce6e6ed2bf78837b458f9c1c33e9aa5", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278948, "uuid": "95d5800b-dcf5-4acb-8985-4b165cb6ed38", "comment": "Malware payload", "value": "0e019b0bbf05d91c0456d7b37429cb633d9c483290aefe857f67a94210c337ef", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278948, "uuid": "001cc6aa-602b-44ae-bdc1-4239eeb308c3", "value": "T182B423F5A7606BCC9D20522F2F4A27CE19274B41B403C54A1ED2876A421F6FF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278948, "uuid": "d000aa53-8a5f-437e-b5cc-ec47a285cbbf", "value": "12288:uBRdpQ73iBVYWmCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUZ:uHUw2WX9XgbM0azTHiQIouDl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776278948, "uuid": "49190d69-53b4-47d9-a308-67a19e060880", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278948, "uuid": "6fd10273-ed21-45ce-8be4-ddac3bc38457", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c93f62dc-38fb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776278948, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278948, "uuid": "4cf5398e-db84-4997-8302-3cc2ba41e09d", "comment": "Malware payload", "value": "b3e9b55c9c312106b1f935fadaf517ad", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278948, "uuid": "66b46afb-cad7-4c75-ab6e-9a54ccff2248", "comment": "Malware payload", "value": "c788654bfd4d02169ac6e112318a353d2279ddff81cff2dab244686fc771f343", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278948, "uuid": "58c08396-3a26-4b94-b264-7e8c3ce4d791", "value": "T1B7B423F193429E0B23A4DAB457A3DB3375CE7292769D9311CA06CB9F487072886DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278948, "uuid": "52346ed3-59da-4c7d-a403-36331113925e", "value": "12288:7kmht7DrvdyiPCCH1oHF9nJ/qjuy8goJrrzTPwkd:7kmHzM4H1ELnK8goJnnZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776278948, "uuid": "e75d2e78-0051-4b6e-9a8f-f037cb45570c", "value": 493748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278948, "uuid": "db0aab54-59f8-42d5-a9ba-ae89afdfddef", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c98769e8-38fb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776278949, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278949, "uuid": "eb6f8a08-99e6-4395-b6b7-f5c4f5840941", "comment": "Malware payload", "value": "46e67bec43d7434597ec9c6f4795308f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278949, "uuid": "62b56854-0dc5-41e4-bdce-1a48a440760e", "comment": "Malware payload", "value": "d797c94fc57d5a1d6f9922cf769d4d636bb865fc7df9a7a6bf08519cb6c441db", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278949, "uuid": "18eb6d1f-934a-42df-80e6-1384b10af51f", "value": "T1EAB4231EF4D078CFD68ACDA394292C785F6C96C9CD126B7246C4EE9312442F627A44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278949, "uuid": "c633c61a-95e1-4e82-b673-194ad0c4efa8", "value": "12288:hTibgSMFBOBSlqrtKu7FxPbzJTVBU+8JM9hAC8Z34VOBRkbKQDiUbpKY:ocSMFYnKkxpTKJM9mCw34VOMWAPbpT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776278949, "uuid": "466838b5-f11e-413b-ae97-a405983e97ff", "value": 525573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278949, "uuid": "ff59c187-d99c-4738-ab64-9bbd2fdc1bbd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c987dc3e-38fb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776278949, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278949, "uuid": "4d76024f-be43-4b28-a939-c841c2875eda", "comment": "Malware payload", "value": "c111750b0e1c9a7a8c392f9ff326384a", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278949, "uuid": "6c007df0-512d-4472-9db6-25170029540e", "comment": "Malware payload", "value": "a7feed3abea3e3d588191ab2c842c11875a09579a11f66b3b52d1df76f7715c6", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278949, "uuid": "d8f2b6d4-d02b-43ef-a6dc-95aa42261a7b", "value": "T17BB4231AF4D078CFD68ACDA394291C785F6C96C9CD126B7247C4EE9312442F627A44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278949, "uuid": "ae87d648-b65f-42b4-91e8-ec168c2ee363", "value": "12288:hTibgSMFBOBSlqrOKu7FxPbzJTVBU+8JM9hAC8Z31VOBRkbKQDiUbpKq:ocSMFYcKkxpTKJM9mCw31VOMWAPbpF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776278949, "uuid": "0094f3e0-aab2-4b27-b816-ec88015f78dc", "value": 525573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278949, "uuid": "68feaec2-74ca-4680-b71d-c1f1662e531a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca4c78a8-38fb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776278950, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278950, "uuid": "db73216e-e8e0-45f3-9120-49de8c7e5dfb", "comment": "Malware payload", "value": "b97ab0d37fffbd00ea45beeefc2d201c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278950, "uuid": "32a60d79-d510-4e35-a5f5-c82e371dcab9", "comment": "Malware payload", "value": "d79902aecaee42114ca57e3882f01f29444bf8190208c17e3b45e1b4e682152a", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278950, "uuid": "43956da6-50e9-4da7-a936-8c4e4a4155f1", "value": "T14DC42367226F72500DFE92ED8E4156146D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278950, "uuid": "0a6b3faa-0352-4949-85b3-5f6f94372c03", "value": "12288:ueCEhtv9qO3g/ALyYG0ZaDajTCXMO8xzDOeQakB:xt1A/f0Za6TCXKBxlW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776278950, "uuid": "66045ea3-f1f7-4018-b091-abdd7ce3b4e9", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278950, "uuid": "7d9a17ef-8fc0-43d3-a7e8-592e552742df", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cabd1a2e-38fb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776278951, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278951, "uuid": "9fcbfe7f-82da-4c7d-9649-b4298a0d7849", "comment": "Malware payload", "value": "d2f49c64981fa54ed72bba4812f2d2d3", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278951, "uuid": "c857a24f-3d9a-4ac4-9ba2-9e72ff86bceb", "comment": "Malware payload", "value": "c28300470fc540ab8dd03ac198f878caf4ef551a45e131d626cdc507a9fa60d0", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278951, "uuid": "296d913a-8e7d-48cd-939f-b2f3cb91e6e2", "value": "T1C2C4238BA3FD845390BF1F58AA5BB48D091976F34722DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278951, "uuid": "d83a38b2-12dd-4765-b29b-fbb58216740d", "value": "12288:L+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byMH9I1P0QKw6FEu:L+QqldA/TSO713u7xnMH9IaQKHP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776278951, "uuid": "eeb405b1-9565-40d8-bce7-d7bbe09e3016", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278951, "uuid": "366b34be-670f-493c-baac-e60f4980101e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb396a59-38fb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776278952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278952, "uuid": "835f9b10-c1cd-4693-bb3f-e5553c8a1211", "comment": "Malware payload", "value": "1b2b8a8a5c9a6666fc76e55796ad4357", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278952, "uuid": "383f85ef-a8b5-499d-91b3-1d6bf535917b", "comment": "Malware payload", "value": "aa43060aedfd088c47d4f4622d5bcb7e35544d1855b26a2dd716057f1738de28", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278952, "uuid": "0f54f8a6-9842-4b5c-9a26-81fb290b0303", "value": "T10DC4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278952, "uuid": "a8851b22-7d64-4035-a1c6-f7d455e29fe7", "value": "12288:7+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byfH9I1P0QKw6FEr:7+QqldA/TSO713u7xnfH9IaQKHq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776278952, "uuid": "a7913796-a1f4-438b-aa61-ec2390124044", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278952, "uuid": "f79a04c0-66a1-435c-a0e3-9bcb4c344dd7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb64da80-38fb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776278952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278952, "uuid": "600ce5ea-0fd5-4017-bc33-03d5cdab8fba", "comment": "Malware payload", "value": "6e0b90ac13f2416037afee02944dfa38", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278952, "uuid": "a09a3fd2-4e7e-49de-aeed-a0eff79645d9", "comment": "Malware payload", "value": "8ff8b0192c02e00af2fffd483a31d53a4fbfbbcd3ccee8d40cff6d8e247d6402", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278952, "uuid": "281b1f2a-5a3b-4e9b-af7c-e20713c1c70f", "value": "T104C4238BA3FD845390BF1F58AA5BB48D091976F34722DC93146A3313D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278952, "uuid": "d970a003-6fac-4d21-b674-dfdf24b6625d", "value": "12288:D+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2bywH9I1P0QKw6FE6:D+QqldA/TSO713u7xnwH9IaQKHr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776278952, "uuid": "4d15352e-765a-4e5e-b1bb-6a43772b73e9", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278952, "uuid": "2b46c49d-0c9b-4a43-abbb-43a55747310e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb761611-38fb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776278952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278952, "uuid": "c90d3279-80e2-4046-8f59-088eb6857062", "comment": "Malware payload", "value": "280ab4d426dea0afbe04ce783bc625d6", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278952, "uuid": "e913c2a4-fa34-4cae-943c-d298720a5ad4", "comment": "Malware payload", "value": "8e9d60f168f7010f6e2527b71ade1d8c30c8d83aa53a0502a0dad2dc6e03f0a9", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278952, "uuid": "a3d77f5f-e25b-4f7b-a85e-a56e0ea97442", "value": "T10DC4236D7018EB38E507A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278952, "uuid": "914a18da-4823-49af-816a-d8b4a221c5d8", "value": "12288:tMU+0xq75aS9iYIp6cP/G2Bku8ltNvC28c5/VTUPkYya:5+J71vI/G/Yc5/p6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776278952, "uuid": "82014273-23a1-4cc8-8f10-07eefcb58130", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278952, "uuid": "5ec7f5df-ec48-43be-8929-9d5cdb22126e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb96a5e6-38fb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776278952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278952, "uuid": "bac4094e-d6d8-452f-a5e3-0dfd92c25ad3", "comment": "Malware payload", "value": "c46dc6b92947b91247eee5828e5727e0", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278952, "uuid": "9df9f370-dfc7-46c0-9eaf-d7b56bdbb192", "comment": "Malware payload", "value": "de3afeb7551ab9db64b5bb97b14641490910aa8f08ed32a3349f39c26f5efec9", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278952, "uuid": "9c8868ca-21fa-4d31-82cb-a3f94c8b0685", "value": "T16AC42367226F72500DFE92ED4E4156146D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278952, "uuid": "e3b9910c-e637-432e-8e76-50d77a2ec4e5", "value": "12288:eeCEhtj9qO3g/ALyYG0ZaDajTCXMO8xzDOeQakV:BtZA/f0Za6TCXKBxlq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776278952, "uuid": "7ec03d93-851c-4072-b694-b1d347de8920", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278952, "uuid": "91924e82-2184-4fb2-944a-6b4c3b0c16f5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc63c54e-38fb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776278954, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278954, "uuid": "8e99f062-b2e4-403e-9d01-6f2045e460b6", "comment": "Malware payload", "value": "e483b66ed690fb23c1d6062a16b89450", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278954, "uuid": "8940806b-28fe-4cf7-96b0-61bba1808aa0", "comment": "Malware payload", "value": "4584e8a887fc1ba35acde0a4a8e76e5cd4d89481edd27aa40febc1eea1f4681c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278954, "uuid": "2cfcd814-2011-4c6f-86d0-085007461079", "value": "T13BC42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278954, "uuid": "58555499-6427-4507-b759-210a6aee9169", "value": "12288:36wlOMWROC/FTeHo22Qm7NzofOr68mxeA924EwCD:P4MQOC/gHozN7NzomW8nA9E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776278954, "uuid": "eb0e014b-31ab-4fee-8c6d-b29d4517afe6", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278954, "uuid": "f1d66172-2d59-4fa1-91fa-5e08e8dabe72", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc9679c8-38fb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776278954, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278954, "uuid": "6792db7c-12c0-4163-8193-72dc90940c06", "comment": "Malware payload", "value": "1148b9967f60a70ae0afce2e67ea9794", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278954, "uuid": "f7451d0e-a440-42c5-8f68-cfcd02ca8ade", "comment": "Malware payload", "value": "f051f54cdd94e04c19c6640091e0b5bccb304a5f5b84f4c68b0543de5ff3598c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278954, "uuid": "5eb8e364-41db-46fe-952f-11b79629e19a", "value": "T194C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278954, "uuid": "b395e7b4-795d-4d1f-a035-5d32b9890815", "value": "12288:j+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2by2H9I1P0QKw6FEc:j+QqldA/TSO713u7xn2H9IaQKH1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776278954, "uuid": "7f069323-e4b5-4a02-a202-da3c41c45f4e", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278954, "uuid": "15d7df9f-21d1-4a37-9535-4aeacba7d54a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ccbed95c-38fb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776278954, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278954, "uuid": "3cf23273-c0c3-4a48-9344-448ab330276d", "comment": "Malware payload", "value": "a9856af2f4f761cc4009d1f42964c48b", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278954, "uuid": "41c0fc0f-a8d2-4e29-916b-fd9b50069eac", "comment": "Malware payload", "value": "279cdb6459ec5db2d13dff07c7bb9910ee38658c91eddc8e2379ee4bc5d78b9c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278954, "uuid": "b6170bf4-e4ea-4251-a38e-5fb67ca26e2c", "value": "T199C423692756F0C46206F3FC828CBCD886EF14F98B9315BAC90FA545F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278954, "uuid": "616b820e-0d2e-4776-b6d5-7d2fd6641bdc", "value": "12288:0A7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWBSFyorOIic/7MPk:fm6Jj6ESfUxZ91kmY/99z8AFXicTD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776278954, "uuid": "3860a0a0-870d-4931-aff5-3981fd519b44", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278954, "uuid": "687c3dc7-747c-4e73-8359-38290d0c4478", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd22c410-38fb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776278955, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278955, "uuid": "ea647a34-2c60-49f6-b9d1-bb6d396722ec", "comment": "Malware payload", "value": "9fde204e7e04c755c42ff14fcaeea118", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278955, "uuid": "f9bb5a79-b1da-4364-90c7-40ac75355670", "comment": "Malware payload", "value": "57206c0e042c4c9fad894ff84c55a4737754530e1b1a4edd4c67fb20182a6350", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278955, "uuid": "7468594d-05ba-424a-bd7e-7eed9419a873", "value": "T13DC4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278955, "uuid": "1d6aa963-5fa7-4296-99cd-1804fbee139f", "value": "12288:n+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2by1H9I1P0QKw6FE9:n+QqldA/TSO713u7xn1H9IaQKH4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776278955, "uuid": "b50ec74e-55a5-486d-a314-edc7ef19cf28", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278955, "uuid": "d00edeb7-994c-4a8c-9c3c-e2f854f2a7dc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd4d5423-38fb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776278955, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278955, "uuid": "a4310a6e-e4d5-4169-8a9c-ca8fd717d603", "comment": "Malware payload", "value": "232e0686d2b7dba9f873e7460719e333", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278955, "uuid": "71269a46-dcc9-404a-beb2-793af1107fb8", "comment": "Malware payload", "value": "2619de0a2ec58a78c779f5105dc3279f393d3f54af1e1ea3d79a3a3f6b37f0e9", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278955, "uuid": "cdc0c937-5b62-4d94-bd29-79d1a221e38c", "value": "T1BCC423792755F0C46206F2FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278955, "uuid": "04c22239-2a30-41da-b8b9-1f4d9d31533c", "value": "12288:YA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWhSFyorOIic/7MPM:jm6Jj6ESfUxZ91kmY/99z8gFXicTD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776278955, "uuid": "2e25afe4-bd98-4f85-9ec8-b81515dfc07c", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278955, "uuid": "d5b60cad-92ad-4da4-b259-add8f9c7a862", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec5bae83-38fb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776279007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279007, "uuid": "0864888f-627e-4daf-b05e-95ea36415a41", "comment": "Malware payload", "value": "85bbe19865946cf193e712a56641c284", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279007, "uuid": "f3f17436-b345-4a8f-8925-4000ff0aca39", "comment": "Malware payload", "value": "9e39c0d92cbff84a5ba53ac5b6716c21f6db234ca9c95e9ba1be7aa419fe9ec1", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279007, "uuid": "cfd64d6a-77cc-413d-a84a-adfa46e8846f", "value": "T1DBC4238BA3FD845390BF1F58AA5BB48D091976F34722DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279007, "uuid": "d599ea6e-fa2e-40fb-bcfd-bd321c738401", "value": "12288:/+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byFH9I1P0QKw6FEd:/+QqldA/TSO713u7xnFH9IaQKHw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776279007, "uuid": "3db556f5-0911-4145-ad92-f063a0a15ba1", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279007, "uuid": "0bcdf21d-f7db-4139-ab52-a094ed49fd59", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6ea743d-38fc-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776279428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279428, "uuid": "c99522ce-7919-40a7-b0cb-2fca6d7840a9", "comment": "Malware payload", "value": "34d0a11057daff50786c78da487e06ba", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279428, "uuid": "9f5ead85-dfd8-4647-956b-3f2fbe21deb8", "comment": "Malware payload", "value": "41e0b5b4b316881ee971922f9d621e12d1bdd6b2f73902af0eeecda7d647c4dc", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279428, "uuid": "62333957-bb38-4990-9cc4-c8e3097b5136", "value": "T127C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279428, "uuid": "5ef20c67-0875-4537-8f66-2df12fba925a", "value": "12288:n+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byoH9I1P0QKw6FE6:n+QqldA/TSO713u7xnoH9IaQKHP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776279428, "uuid": "c599c28a-265d-417c-b6c3-94f056548a69", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279428, "uuid": "5a54bbc5-4115-4b0c-9cf8-409d721a1f69", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5844fd9c-22f8-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1776279428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279428, "uuid": "eadc4e78-7614-4970-ac8f-0eae4f5fb726", "comment": "Malware payload", "value": "c68d41a6cf085357ca70e8b19951b8c6", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279428, "uuid": "62b4b8ee-ce7b-43a5-89c6-4e9398138262", "comment": "Malware payload", "value": "8dcec9749a8a778fe19294179fa02ee98a726e4aaea03b8afb0272ba1d5ed3fd", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279428, "uuid": "01c36ed6-aa4c-4a81-b20b-1a0eff35888e", "value": "T106C42304340641D5835A2B1EAEC4E7E0BEB5A0DBFA1CF940AADD7ED06DE96A177C14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279428, "uuid": "00096fe6-278b-49d3-9e7b-0f74cdaa5685", "value": "12288:z6wlOMWROC/FTeHo22Qm7NzofOr68mreA924EwC9:r4MQOC/gHozN7NzomW8NA9K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776279428, "uuid": "883449e9-2734-4db9-8bd4-4dc51e310acc", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279428, "uuid": "e4e505a7-0c58-47ce-84b2-2a1ccb260cbd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e717c8dd-38fc-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776279428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279428, "uuid": "8ca58bbc-8c19-4fcf-b3a4-964289b72cf5", "comment": "Malware payload", "value": "1a7aef77471d76a5c3d137dff790be64", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279428, "uuid": "9ecc5ec6-e3f7-4c25-bd74-d73d137c8ffb", "comment": "Malware payload", "value": "8435303abb8fe4712e02c53e6205ab4c953547c86c1d06c91cd5e4e99ed9e705", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279428, "uuid": "1429fe2f-0487-4e85-bd13-c79251165aa2", "value": "T134C42304340741D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279428, "uuid": "a332d35d-b0f7-41bc-b245-14db88e71ecb", "value": "12288:L6wlOMWROC/FTeHo22Qm7NzofOr68mfeA924EwCp:z4MQOC/gHozN7NzomW8FA9a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776279428, "uuid": "1e084c4e-2cae-434f-a3d3-497f5b03c8ee", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279428, "uuid": "ae380665-6f08-49bf-9fd7-965e9ec40bf4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7636227-38fc-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776279429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "f6f7e2b2-9632-49a8-be24-9f3978174680", "comment": "Malware payload", "value": "7dddcd0a90fb28d90a8e55320326b022", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "c7bccd52-485b-45e5-ae99-8d93b925db8d", "comment": "Malware payload", "value": "cc42a37ef50d23b5bcff4cc207c3596631195bc97c935515b76fdb17a2c91340", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279429, "uuid": "0033bff0-8334-4dcf-8e8a-fbe49807a9fa", "value": "T1A9B423F193429E0B23A4DAB457A3DB3375CE7292769D9301CA06CA9F4C7072886DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279429, "uuid": "ad24cad5-7adf-43d0-a1a8-262b5fa82222", "value": "12288:ikmht7DrvdyiKCCH1oHF9nJ/qjuyFgoJrrzTPwk0:ikmHzMzH1ELnKFgoJnno", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776279429, "uuid": "d2962c85-c12b-4776-977d-d029d37748f2", "value": 493748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279429, "uuid": "9832b469-fb99-4ff0-af8c-e5be55d134fc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e76da11a-38fc-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776279429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "50631365-cfe9-4ec7-99b5-1408161ef97a", "comment": "Malware payload", "value": "722da4848a903dcab27ace032e52eae1", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "b50bd212-aeb4-45b4-b245-4d8555083ad3", "comment": "Malware payload", "value": "bbbb683963e2a8fa01edf28154110e5d621d4f66aabab222638991cedb084890", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279429, "uuid": "620dcc43-1b7b-4cef-99dd-dd130353fcd8", "value": "T1E9C42304340741D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADD7ED06DE52A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279429, "uuid": "4bf359db-cf1a-4933-901a-5e43d0b6d76e", "value": "12288:H6wlOMWROC/FTeHo22Qm7NzofOr68m1eA924EwCP:f4MQOC/gHozN7NzomW8HA9E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776279429, "uuid": "a6cea16d-27e5-4d03-a762-3799ee0b8b12", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279429, "uuid": "9a8287cd-e54d-4422-bc6a-9a1343e92218", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e76dce44-38fc-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776279429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "fe4da1fb-d441-467e-92e9-26b17a4727b9", "comment": "Malware payload", "value": "0d32420601dd2781125c6f6199a5f58f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "57d0abb9-3a76-4332-a3f1-42191422617d", "comment": "Malware payload", "value": "0f566675702849b2654275063bd7cd40c95a4e6f8414ed35c3f481213192a06b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279429, "uuid": "7ea1492d-a1d1-40cc-a0aa-c7c5843b62f8", "value": "T17BC423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A8D9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279429, "uuid": "8a842d77-56ec-4ab6-bbce-396c79220e1c", "value": "12288:DyBXIs7rM1dcqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5E:WImQ1ZEA/f0Za6TCXKBxea", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776279429, "uuid": "d9a05864-a216-4dd0-817a-111f5188eb80", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279429, "uuid": "0f7d0bf3-fd80-4726-9c70-a3cab870d987", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e77ee329-38fc-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776279429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "7c417b49-295d-47ff-98ad-4f462e9f2ce6", "comment": "Malware payload", "value": "ce60fc3af3f13ff4518c45ba0dd68a20", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "fd929965-8c09-47e9-b296-ae2849c0882e", "comment": "Malware payload", "value": "4121846025607f6ef4d11bd326b864c5f92e79d94a2004cdcf2f77b9587ad7f3", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279429, "uuid": "4d7e65d8-06d7-4d96-961e-430b71d6783d", "value": "T189C42304340641D5835A2B1EAEC4E7E0BEB5A0DBFA1CF940AADD7ED06DE92A177C14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279429, "uuid": "cd191bbc-3e79-4154-8f2b-66561ec80684", "value": "12288:D6wlOMWROC/FTeHo22Qm7NzofOr68mEeA924EwCO:74MQOC/gHozN7NzomW8KA95", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776279429, "uuid": "ef5b930c-d452-4f32-adb1-c9a418de3b3a", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279429, "uuid": "6f9efbeb-228a-4458-8137-72eaa26b0ed3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7ab9d14-38fc-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776279429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "867298c5-5bc3-44e5-9851-19d4dd807f6c", "comment": "Malware payload", "value": "9e69ca718b3df53b7463b9712d72dc78", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "cdb80d97-f564-4ffd-9186-37f1907e442b", "comment": "Malware payload", "value": "d5e9eb96e00851958e5f2482b4efc7f4f644a321c3518fe28da3503c3a0d4ad1", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279429, "uuid": "595869c6-46a4-40b1-bbac-9ee6fe35005a", "value": "T1B7C42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279429, "uuid": "91873fb1-ea41-446c-8718-a66d412992e4", "value": "12288:X6wlOMWROC/FTeHo22Qm7NzofOr68mJeA924EwCL:v4MQOC/gHozN7NzomW8vA98", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776279429, "uuid": "b41b3731-d1dd-4b0e-ac6a-b99d77143ff8", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279429, "uuid": "5c4ffd68-0196-436f-9434-fa17dff19604", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7c96e53-38fc-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776279429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "66299fd3-5d05-4980-b063-1e2c3eaa323d", "comment": "Malware payload", "value": "93785a94f2b02aa12830621c38ee07c0", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "a654b4fe-6315-4ead-9a49-49389864dbfb", "comment": "Malware payload", "value": "120b22e01f7d12ca4944cd8f3fd697f3925dfd4b1f8cdaab4dc322ad26334b15", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279429, "uuid": "971d5288-c487-48d5-a463-5fdb18a03fa5", "value": "T12EC42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279429, "uuid": "c29ae15d-fe1d-42f4-adf2-e2651c352dc0", "value": "12288:j6wlOMWROC/FTeHo22Qm7NzofOr68mbeA924EwC1:b4MQOC/gHozN7NzomW8VA9q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776279429, "uuid": "c2a628a1-51d3-405c-8fa5-ed5b5f54ac54", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279429, "uuid": "c780f3da-98c2-44c8-a3ac-a0c4d1bb6e23", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d325906-12a9-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1776279429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "73a7b9fc-4aa0-4c09-b881-b67ccd378043", "comment": "Malware payload", "value": "7d29da1f4b3bc02a215353fab54c634f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "0cc9a591-c094-47ca-9d72-732508f095f7", "comment": "Malware payload", "value": "398f3103e7e93c0c3fedbc22a25e86462a0131b67e375c0553cad207fe6fbc1d", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279429, "uuid": "e233fac9-d875-428f-945a-ef1389234044", "value": "T13BC42367226F72500DFE92ED4E4156146D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279429, "uuid": "d7fa334d-cf60-4342-ba2c-6febd258bc96", "value": "12288:IeCEht49qO3g/ALyYG0ZaDajTCXMO8xzDOeQakw:/tiA/f0Za6TCXKBxlf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776279429, "uuid": "4fb477d9-d220-4e97-8661-19c1a7be690a", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279429, "uuid": "62a30cca-f7f9-4bae-b334-e544319cefdb", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb1ed0a0-38fb-11f1-bc00-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1776279728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279728, "uuid": "29cc10fd-f4a2-41ab-8f71-05b25d8c5946", "comment": "Malware payload (NetSupport)", "value": "fe91f763ea2f8f3a11590a6961b24e7f", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279728, "uuid": "88c93080-56ee-43eb-95f9-a64b6a9f0f90", "comment": "Malware payload (NetSupport)", "value": "fa977a79d123cb894659e9b1e9bab46e1984b892a886254d43f3bfc688640fd8", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279728, "uuid": "6d5edde0-8810-45d0-96b2-0af4b748475f", "value": "T18AF55A0BECB98CE9C099E27484336556BB75B8401B3173E72AD1B3A82E737F09975B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279728, "uuid": "bff9aa01-1c22-4b1e-b260-591cc3e2c9e0", "value": "3271ee162568f50a6810be9b8973807f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279728, "uuid": "330b9065-949d-4093-8723-0ee7269c1d08", "value": "24576:Z//PiGvOvX/04cfadLCfT36EuOofK7n2f9pB+kW1qgsKGFQ8lT9S1HuCQFs09xhE:Z//a5vv04cGSPutIb1r/N8YOWhj3QclT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776279728, "uuid": "f421004f-36f6-47df-ad32-96afdb5f3f4b", "value": 3499504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279728, "uuid": "7ecb2c0b-456f-4b30-bd90-223271321d38", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e178a80e-38fd-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776279848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279848, "uuid": "eeb7ce25-f35f-4535-9394-d679ad02f37c", "comment": "Malware payload", "value": "b5d39813de29c1cbc15a474a06e8be0f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279848, "uuid": "4e433c1c-7461-405c-aa0f-0f5b8b625ed3", "comment": "Malware payload", "value": "393d515d86b905fb08382b88a540ef00e9b5758ad3dfb7a75ff4bceb986a06e8", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279848, "uuid": "e7a536d3-088a-403b-b1cc-562ca3dbdb52", "value": "T160C423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A8D9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279848, "uuid": "83c07717-777a-4e1b-add0-1c6f7f913781", "value": "12288:tyBXIs7rM1fcqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5o:YImQ1/EA/f0Za6TCXKBxeO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776279848, "uuid": "0a88531a-d25c-4e16-973c-7cc3defa4b77", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279848, "uuid": "28f1f6b7-2aa5-4676-a2ab-897a7a4050c3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e17a8542-38fd-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776279848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279848, "uuid": "b93ac176-f419-482b-9ec2-b92aaca73965", "comment": "Malware payload", "value": "3410556f7788c52f1f23600f37ac0428", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279848, "uuid": "faa67f16-947f-47d1-aa10-211d4cb48029", "comment": "Malware payload", "value": "b3e29a535bb4f4c44fb009ee72084dda257d01a7d95393280e7013c22bb9a645", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279848, "uuid": "a012a74f-d2c1-4362-9259-59aa9cf55d8a", "value": "T129C42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE92A173C19", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279848, "uuid": "ec88e335-bcb2-482b-a041-6f238be93659", "value": "12288:L6wlOMWROC/FTeHo22Qm7NzofOr68mseA924EwCs:z4MQOC/gHozN7NzomW8GA9T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776279848, "uuid": "d8187ff9-ea60-4248-a4df-3c0e2f113b8c", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279848, "uuid": "e9bfa643-f9ca-4e4c-8c4b-bc42c64fd2b8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e18fce96-38fd-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776279848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279848, "uuid": "c87aeb7d-2cc3-4ac5-821b-2905e725c1a5", "comment": "Malware payload", "value": "2cdd910cc9ee68705b18164ffaef0006", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279848, "uuid": "01219f73-7052-4de5-92dd-541de25e5cba", "comment": "Malware payload", "value": "b4053e6dc24ae85394f01e5b72bab055e3d3802c89c6c784e98e52b4507c35bd", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279848, "uuid": "511b10c2-ccdb-400b-b618-acce40788c06", "value": "T164C42304340741D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADD7ED06DE92A173C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279848, "uuid": "06dac3fe-fd52-4816-a484-10bc479b93ae", "value": "12288:b6wlOMWROC/FTeHo22Qm7NzofOr68mmeA924EwC8:D4MQOC/gHozN7NzomW8UA9v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776279848, "uuid": "c3e46fd8-b08e-4df5-aafd-9ceb12dc5f72", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279848, "uuid": "dc5c92a2-02fa-49a9-941f-1fae88efd2db", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1a44d3b-38fd-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776279848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279848, "uuid": "f9750843-8b7b-42c2-8e53-3a222f94dbb0", "comment": "Malware payload", "value": "958493f7b0f2f6b4a422dc2c52dfad1b", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279848, "uuid": "a8a8f011-6103-4051-abcf-ca6b8c9520fa", "comment": "Malware payload", "value": "d4c4bcee5b2107f2e0479eea08ee104ef84630ed8de145a8f94b47ea4508a5e9", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279848, "uuid": "75d41443-8e07-4428-be45-20bb7e7399de", "value": "T105C42304340742D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADE7ED06DE52A177C14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279848, "uuid": "d15a3cd4-5f73-427b-a760-808b14242da6", "value": "12288:n6wlOMWROC/FTeHo22Qm7NzofOr68mUeA924EwCS:/4MQOC/gHozN7NzomW8uA9p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776279848, "uuid": "b08df47f-c114-466d-b750-b8ce6050a247", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279848, "uuid": "41b2ba65-b92e-487f-b6a8-c015c4e92703", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1af6909-38fd-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776279848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279848, "uuid": "f7605154-4ed3-455b-ac66-57fbd15b176d", "comment": "Malware payload", "value": "3fc42ef94747b0567125b2440f1cd170", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279848, "uuid": "4a009dc4-8190-479f-9d4e-c0c109031a56", "comment": "Malware payload", "value": "d69c5129f8d3ffcaf736e6609b2d8aa000c7699651bd8e35c88331f825828bd2", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279848, "uuid": "7999c2c1-4239-496e-a45b-2447698bbac8", "value": "T1C0C423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A8D9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279848, "uuid": "08aab492-7bed-46d5-bfa4-a4e7d0ff04d0", "value": "12288:yyBXIs7rM1qcqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5E:3ImQ1OEA/f0Za6TCXKBxeS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776279848, "uuid": "a1c14cd7-8da9-4881-8730-098e56288cf5", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279848, "uuid": "8273108d-703c-496a-ad86-39edba2e5d7c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1bb100c-38fd-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776279849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279849, "uuid": "a824dab1-e4a2-4079-8ad6-0b42e6b18b65", "comment": "Malware payload", "value": "8bd2f1324861970494bba1ba702cea64", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279849, "uuid": "13970fbf-e8c8-4122-bfde-feef11c460f6", "comment": "Malware payload", "value": "34248c41a9f21467e217195c0e4782b2d6fddbf823a32b3e0123b3d8fc559f39", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279849, "uuid": "06d5707a-c5cd-4fe3-9a8c-fca45506ab72", "value": "T1ABC42304340741D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279849, "uuid": "48128c64-ab51-4cc7-b9ea-7c8893c9e86c", "value": "12288:H6wlOMWROC/FTeHo22Qm7NzofOr68m4eA924EwCO:f4MQOC/gHozN7NzomW86A9N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776279849, "uuid": "ec718a5e-e86f-411d-aaff-4c925439a857", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279849, "uuid": "a752b809-5359-46f1-bf9e-1b88f0a91c9b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1d0f1d3-38fd-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776279849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279849, "uuid": "da91029f-ef03-4bc8-bffc-54af1800af72", "comment": "Malware payload", "value": "184ffee46d2f92e69ba973c6d1de6558", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279849, "uuid": "09ad745c-6341-4483-b57a-d510e722bf93", "comment": "Malware payload", "value": "b03ec8775d816b40fa96a2bcc14ad4a0d9876e4e827460bebd266e9c6b2ee721", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279849, "uuid": "5a06cf10-fbc3-4f84-b907-a1c7ba4387bf", "value": "T181C4231DA0547B51F64B6A78B323CDB09B29D03FD219C388A0840B399B5BE5769CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279849, "uuid": "c5853ab0-525b-44d7-be12-382af4892415", "value": "12288:EMU+0xq75aS9iYIp6cP/G2Bku6zXLwHXP427b7:g+J71vI/GzXsftH7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776279849, "uuid": "4fdb32bc-3f3e-4533-987d-18fe6c23b634", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279849, "uuid": "99eca284-319c-49b4-8379-fad6af89138f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa5781ad-38ff-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776280749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "12beb5de-292b-441e-8ac6-8a1d8bfd25e3", "comment": "Malware payload", "value": "f1a5b62e960f02291b0585b9716da1bc", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "c2faeeb7-5cde-42e1-ab25-1853fdd23ac7", "comment": "Malware payload", "value": "7df48159367486afabf9acf90c6a49407a943a8cefa176ac9819fcab7e01fda4", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280749, "uuid": "1035e655-1848-457e-9e44-ec1cfbf88f54", "value": "T189C4235D7018EB38E907A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280749, "uuid": "2f70c4be-ddf4-4327-8512-f85c7d6b5391", "value": "12288:1MU+0xq75aS9iYIp6cP/G2Bku8jtNvC28c5/VTUPkYyM:B+J71vI/GJYc5/ps", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776280749, "uuid": "10c451f6-bcd6-492f-9137-70f7c1a151c0", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280749, "uuid": "3dd75c25-a850-41fe-9dc6-e2282c5e288f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa644dfc-38ff-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776280749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "5f1767e3-8a0a-4d7c-a3f6-84485fd064d2", "comment": "Malware payload", "value": "1236ef49f46e896ee90a0b16db032a8a", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "5658a0ba-021a-4b6e-b784-c8a1fd23b535", "comment": "Malware payload", "value": "c2319569b423c7dd810910aadee36a3e798d0281e76cba0d4d1f474faabda2ae", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280749, "uuid": "35ba0303-db8e-4880-8e81-195d0fee6a9e", "value": "T18FC4238BA3FE845390BF1F58AA57B48D091976F34722DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280749, "uuid": "7c0913e7-a376-44f8-8c44-05a4a2c58935", "value": "12288:3+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byjH9I1P0QKw6FEf:3+QqldA/TSO713u7xnjH9IaQKHi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776280749, "uuid": "dfbd2ec0-74e7-4194-ac52-0e7496108fb0", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280749, "uuid": "0f7ed22c-3e15-4dc4-b25f-e241f517cbd3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa66c238-38ff-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776280749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "afb1cbff-578b-46de-a65e-21c6839e337f", "comment": "Malware payload", "value": "b8486e2314779f84dcef40ac5c6ecc60", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "5c8ea0b6-8b57-48d3-acd7-9e11a2aa504b", "comment": "Malware payload", "value": "1f7859c0435aa63f322e25fc1e1476b733dd99ba35fbc7174470db29cc397ada", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280749, "uuid": "67296bb3-44b2-4def-9afd-f5f219d4763a", "value": "T1AFB423CD64BED0A87B658DDA9FDCBFD30CFC003A6D7526F2A51C1A13A1C404B64E95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280749, "uuid": "d231b3cc-7cbe-4278-972d-c0081fb0809f", "value": "12288:GB/e4pqNFTFbEXktDoGbDDGIabs/7iiEVwYg2l3/2Nyq:GBm4pgT3oGTabs/7iiWw0Dq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776280749, "uuid": "4ac9be3d-9750-455c-9bb5-d4a227396146", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280749, "uuid": "e51b730b-aa12-47ac-a2ec-2a97da8b1c9d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa6ea986-38ff-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776280749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "dd3f881e-c189-42d7-8b6f-21ad93e0b204", "comment": "Malware payload", "value": "c6a7831ca7939f59cbe2c308f164964c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "8535ab1c-0212-40d6-9a71-bc77b9b9d6ab", "comment": "Malware payload", "value": "d59b44191a80b46def63c6cb181fce3063b0667e110c7a1ed4d70723f3342b14", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280749, "uuid": "a6809635-2220-4da9-99cc-14e78c3cd53f", "value": "T10AB423CD64BED0A87B658DDA9FDCBFD30CFC003A6D7526F2A51C1A13A1C404B64E95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280749, "uuid": "2a651872-792d-467f-8e2d-a67f6d756ab2", "value": "12288:EB/e4pqNFTFbEXktDoGbDDGIabs/7iiEVwYg2l3/2Nyk:EBm4pgTHoGTabs/7iiWw0Dk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776280749, "uuid": "7cf56f73-b1db-4e4f-bda6-81dee083f76b", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280749, "uuid": "3ede2880-8acc-4d16-a610-c9048cc655e2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa7122eb-38ff-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776280749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "b4200d96-e0c8-4a3a-a444-d953a6b43647", "comment": "Malware payload", "value": "0776f285e9fbdd988966fb3f19618f67", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "64d1bd9f-2ef5-4dc3-bbf8-db806194214d", "comment": "Malware payload", "value": "dbca62b255ac05cf08fd985cb1dd1e8134379ca61496efe6c67c5ec451fc9091", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280749, "uuid": "4f652a89-28ad-4527-8c84-0547cb94e8c7", "value": "T18FB423CD64BEE0A87B658DDA9FDCBFD30CFC00366D7526F2A51C1A13A1C404B64E95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280749, "uuid": "fab1cdb1-783e-429c-8c56-38b209a973cf", "value": "12288:kB/e4pqNFTFbEXktDoGbDDGIabs/7iiEVwYg2l3/2NyE:kBm4pgTHoGTabs/7iiWw0DE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776280749, "uuid": "370ddb8b-5c67-4d94-8514-85f0313a369c", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280749, "uuid": "bc02f48b-e4e8-4301-b2bc-4597cc9d01e5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa79f37e-38ff-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776280749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "003d8cb6-c3c5-4ce5-8716-c9d920f08fb7", "comment": "Malware payload", "value": "468b98780442905ab2955a5b8144bf8d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "fe78362c-54dd-4730-bf22-e8f9d15e135d", "comment": "Malware payload", "value": "f3ebdf3d41e9f83fd93c78cc521d074c2236b306428491e1bb90cdf97134e845", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280749, "uuid": "326912d6-0d68-4b65-8600-fd077458ae91", "value": "T10DB423CD64BED0A87B658DDA9FDCBFD30CFC003A6D7526F2A51C1A13A1C404B64E95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280749, "uuid": "be459fd1-f1e2-446b-85d9-83cceaae0238", "value": "12288:HB/e4pqNFTFbEXk3DoGbDDGIabs/7iiEVwYg2l3/2NyF:HBm4pgT9oGTabs/7iiWw0DF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776280749, "uuid": "e4f8fef7-9271-49f3-bda8-d11ec2c3e557", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280749, "uuid": "25d5acad-b1d6-4b81-b7ba-6c1521873881", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1ff3d0a-2ba0-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1776280749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "b96ca03d-bbfe-466f-8387-549c911b3998", "comment": "Malware payload", "value": "b646cba30f4cb1322f6c1f18f8520841", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "f8f18f10-6df4-44f8-9932-0aabe04ccd96", "comment": "Malware payload", "value": "6d2b14632becee6ccc9bfd8dc5d32bc910562c86b3a8d74d538721a005bf40b0", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280749, "uuid": "2ce7b5c5-2cef-4e1a-9746-ba24af60b000", "value": "T116B423CD64BED0A87B658D9A9FDCBFD30CFC00366D7527F2A51C1A12A1C404B64A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280749, "uuid": "4469e545-dd1d-4fb9-a649-f4f9bc8a8e96", "value": "12288:2B/e4pqNFTFbEXktDoGbDDGIabs/7iiEVwYg2l3/2Nya:2Bm4pgTXoGTabs/7iiWw0Da", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776280749, "uuid": "7a9502a3-787e-4d1e-8630-a88d51241d10", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280749, "uuid": "8e21e9e2-38e7-436e-90fc-02f101e867de", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbcab1be-38ff-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776280751, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280751, "uuid": "fb6fc02d-a857-45c1-a698-f22b50622e90", "comment": "Malware payload", "value": "7a18a53233e06166a57baffac92f737e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280751, "uuid": "b4e9370f-2beb-4550-bb88-b33468a91179", "comment": "Malware payload", "value": "2cbaefc91a1a46c317fea40f8e180611367f76a6c7e63424483e1cf02420695e", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280751, "uuid": "f8eec88d-5368-41f3-9e9c-6e2c846d1109", "value": "T1E6B423CD64BED0A87B658D9A9FDCFFD30CFC003A6D7526F2A51C1A12A1C404B64A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280751, "uuid": "6a86e781-7bd9-4d73-9453-dda417039780", "value": "12288:7B/e4pqNFTFbEXkHDoGbDDGIabs/7iiEVwYg2l3/2NyB:7Bm4pgTVoGTabs/7iiWw0DB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776280751, "uuid": "0884f8ea-4a78-44de-a05a-cd514fa47539", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280751, "uuid": "904ef5a0-dcc4-4e5e-9748-b551c5a79efd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3851278d-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281712, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281712, "uuid": "391be8da-feb5-474a-a480-37274769f57f", "comment": "Malware payload", "value": "fd7e0379cdb4839fde9e166edb7b4f4a", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281712, "uuid": "e9ff5a4e-fb29-4e69-a797-b15084bc176c", "comment": "Malware payload", "value": "dbca2c6a9603e630d9437ea7b49f69d88b8b3aa84c47b8c2ee1cca1d6937fe61", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281712, "uuid": "f1608c49-ceae-494a-923c-4e63206d068a", "value": "T108C423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281712, "uuid": "b152aceb-b16f-4ca8-83e9-d3c745d91991", "value": "12288:YA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWxSFyorOIic/7MPc:jm6Jj6ESfUxZ91kmY/99z8QFXicTX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281712, "uuid": "a33c6aba-1204-495d-80f7-894e1957bb84", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281712, "uuid": "07e42e0c-0aa0-44d4-9b2d-99254d03e1bd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3866fb6e-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281712, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281712, "uuid": "00bda893-1bdf-4667-90e8-f27627749c8e", "comment": "Malware payload", "value": "5ecccc33720abe64ac847a3ea7fe85a5", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281712, "uuid": "248fdd57-53af-4272-b54c-0d51eee5effa", "comment": "Malware payload", "value": "c5634d06af2255e0f212fb96d88a60c06ac200de3167c7b30126f0799367cdfe", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281712, "uuid": "4f1e227e-2170-4902-9209-0304aa6c3dee", "value": "T111C423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281712, "uuid": "a4b7ae05-7cb1-4b2e-8742-87d1110cdb99", "value": "12288:+A7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWsSFyorOIic/7MP1:xm6Jj6ESfUxZ91kmY/99z8JFXicTm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281712, "uuid": "6bb3a386-dcf4-45f5-a275-7b644cf9ee53", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281712, "uuid": "73dd0d7a-874e-4db2-870b-fb1e2101781c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3873fea8-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281712, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281712, "uuid": "7a0f306b-9721-479f-b0da-332c25689813", "comment": "Malware payload", "value": "c55a72082bc90717b202059a981dcd9a", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281712, "uuid": "cdffa807-d6fd-40eb-bd27-608423df570f", "comment": "Malware payload", "value": "f631f66bd71cc389fe76611feda524532209a2b1374f6d1c2c2aa661dafd113b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281712, "uuid": "69e0c365-874b-4602-b7f3-9c68e916e172", "value": "T1A2C423692756F0C46206F3FC828CBCD886EF14F98B9315BAC90FA545F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281712, "uuid": "e7e578df-9510-43c2-a149-4c9ab4efdd24", "value": "12288:0A7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWtSFyorOIic/7MPA:fm6Jj6ESfUxZ91kmY/99z8MFXicTj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281712, "uuid": "7a89226c-689e-4d50-8518-9cdaad81272e", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281712, "uuid": "b137c1ed-c942-486e-ab5a-5c4978df2b73", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3874bbc0-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281712, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281712, "uuid": "465d31e8-e354-4ade-9999-d06a18b6391b", "comment": "Malware payload", "value": "bb76a91a623b4efd66a35769618ec455", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281712, "uuid": "bc90af5a-4b6f-4c7f-a248-7d2041aa37d7", "comment": "Malware payload", "value": "117a3bb4dd3de1e831c901645c5668fdb48b951158947a79a6d882eff2dfc377", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281712, "uuid": "97109e26-02e7-4231-af7c-3569ea8f13b2", "value": "T105C423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281712, "uuid": "77a6bba3-9f7d-440c-b6e1-2db9c951e452", "value": "12288:SA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWcSFyorOIic/7MPh:lm6Jj6ESfUxZ91kmY/99z8ZFXicTS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281712, "uuid": "a47366ef-80d8-4d96-9607-e0031f5535d3", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281712, "uuid": "2206411d-5efe-4dab-b9b9-72f99f00b5bc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38dc2a5a-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281713, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281713, "uuid": "f6f2e0c1-36fb-47dc-a945-f13e41338b7e", "comment": "Malware payload", "value": "8d7b10b97cb777e0ea6247980a858470", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281713, "uuid": "dc7fbe0b-4763-4290-ab76-6d95d36061d1", "comment": "Malware payload", "value": "815332fb5d8c1d371361a10ec9e8dfa9e2181d8611dfe045293a07849e8b2484", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281713, "uuid": "bd485ece-0ce7-4acc-992b-c2b6ba7a1658", "value": "T105C423692751F0C46206F3FC828CBCD886EF14F98B9315BAC90FA555F456267BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281713, "uuid": "250612f5-64f3-460f-9e8d-f262ccfd4dc8", "value": "12288:YA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWnSFyorOIic/7MP2:jm6Jj6ESfUxZ91kmY/99z8SFXicTt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281713, "uuid": "a38fc9b4-19b9-422e-83dc-bff240b9224b", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281713, "uuid": "c4b99c44-ae53-4cfd-a599-b5cb8d74467d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38e2805b-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281713, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281713, "uuid": "fe492116-f4e7-4543-8a15-580858456490", "comment": "Malware payload", "value": "45fbdd8239844a516abf1e3764a79cb2", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281713, "uuid": "3bde8058-214e-487d-836a-621617b77969", "comment": "Malware payload", "value": "b7b900ba1b9c31695ed06d7c31e6de883ee9aa8e80ea8726060bf2d004243837", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281713, "uuid": "f26ddb97-32e7-4ab3-aa8d-222c8d2a443d", "value": "T14CC423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281713, "uuid": "bb5b4678-8ead-49d2-82bb-dbc99194e05d", "value": "12288:IA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWXSFyorOIic/7MPa:Tm6Jj6ESfUxZ91kmY/99z8iFXicTZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281713, "uuid": "23a0b045-0c32-4afc-8c04-7d9dbe35d86f", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281713, "uuid": "3489d966-7a29-47a5-ac43-3ec598007877", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3949da48-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281713, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281713, "uuid": "9ca80cfd-717f-420f-9935-361929b4958c", "comment": "Malware payload", "value": "86ccd5bcdc47ee4a90436d65197e7f2c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281713, "uuid": "bce5469f-095b-437b-9d07-3a9857b43319", "comment": "Malware payload", "value": "a868e9d79022fb91654d86054b9ba31a1359a0073fadc3945221ed5911d11569", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281713, "uuid": "a20d2f27-7ebd-441f-902e-6539e33c1eef", "value": "T1F1C423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281713, "uuid": "726f2f96-6339-4200-86ed-17d850964f7b", "value": "12288:OA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWUSFyorOIic/7MPN:Bm6Jj6ESfUxZ91kmY/99z8BFXicTO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281713, "uuid": "b7bd2251-cee2-4353-9878-46be1a39b445", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281713, "uuid": "86c136df-a22d-4a67-a26a-f8e636337f7b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a2d1bdf-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281715, "uuid": "49b61155-cbb7-41eb-8c8b-c61b58277c73", "comment": "Malware payload", "value": "f0be71114935bf729df18c3ec44ac3f3", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281715, "uuid": "fdc95744-5d5f-488e-bdd5-1a6602007fcd", "comment": "Malware payload", "value": "2ea02418dd9e531e1d7f897c7a07339c47a509ccd036e4de12c2a4fa4996dc32", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281715, "uuid": "f3fcc58c-d064-4b4d-984c-e20b5e082d23", "value": "T113C423792755F0C46206F2FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281715, "uuid": "057a0515-a48c-425f-ad41-be902e6318f6", "value": "12288:SA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpW8SFyorOIic/7MPB:lm6Jj6ESfUxZ91kmY/99z85FXicTy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281715, "uuid": "876acf38-1b4e-4b3c-acf0-f63b3e698202", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281715, "uuid": "c650bc63-7143-4e80-b845-9046ea5d052a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a332955-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281715, "uuid": "dc313660-3e10-44a3-ad12-a18ac0ecb2a1", "comment": "Malware payload", "value": "7eb74f63c085b952079bc9c274fd102e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281715, "uuid": "bdbde995-82fd-490a-a564-79b5b54e1d23", "comment": "Malware payload", "value": "d225058277e259c4a3cf0a5ebc5f3b903b022eab34ef158a5c02ae3f8380781c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281715, "uuid": "ce4af662-f709-4f1f-9e05-b9c0a504f04a", "value": "T1DFC423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281715, "uuid": "f2041481-368e-43dc-9f67-ef3d07ca9eef", "value": "12288:QA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWrSFyorOIic/7MPy:7m6Jj6ESfUxZ91kmY/99z8GFXicTx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281715, "uuid": "e19371f4-d3d2-497e-896f-b4e320f43268", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281715, "uuid": "34d9f7f1-8360-4dfd-9af8-48eb1514f5a6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a534bc5-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281715, "uuid": "0e3b91b1-4e89-4c20-9af1-2f4c781c71cb", "comment": "Malware payload", "value": "8c29ecd623766acc45b6f93feb2fd386", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281715, "uuid": "9b20cc67-2b84-44eb-89cd-d74e8d02ddb6", "comment": "Malware payload", "value": "206d814c0f93f68d84815ef4ac5d437e61c039efd1183d661165eb643057f7be", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281715, "uuid": "98fe0820-eba7-46f9-a799-b217824c1585", "value": "T1B6B4231AF4D078CFD68ACDA394291C785F6C96C9CD126B7247C4EE9312842F627A44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281715, "uuid": "a03055a5-a752-4806-b83b-dc179e08a7d2", "value": "12288:xTibgSMFBOBSlqrxKu7FxPbzJTVBU+8JM9hAC8Z3QVOBRkbKQDiUbpKQ:4cSMFYvKkxpTKJM9mCw3QVOMWAPbp/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281715, "uuid": "1cd9f336-ec21-4c5e-9e2c-9ff98d305086", "value": 525573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281715, "uuid": "a95baf04-819c-44ff-8f34-7976d5e7f2b7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c62a6612-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281950, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281950, "uuid": "18675930-302d-4302-a8cf-4586da62eef9", "comment": "Malware payload", "value": "bd47d5196662ba476a5940a63acca9d3", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281950, "uuid": "27d8eec4-e8bc-4b11-96c7-346efae339a1", "comment": "Malware payload", "value": "3695ede0a96e7d393e5f6d3a294df3f2f9a5e459ba78688bb968d9c9a396954f", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281950, "uuid": "31087920-85c5-4ef2-8304-69a0aae1bc13", "value": "T164B423CD64BEE0A87A658DDA9FD8FFD30CFC00366D7526F2A51C1A13A1C404B64E95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281950, "uuid": "fa1a158b-da73-428a-a220-b38464169234", "value": "12288:cB/e4pqNFTFbEXkhDoGbDDGIabs/7iiEVwYg2l3/2Nyw:cBm4pgTjoGTabs/7iiWw0Dw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281950, "uuid": "c1d31ff3-9715-4cda-9602-f177b4debea6", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281950, "uuid": "a97b45a1-b08b-44b0-b0e3-c94205777328", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6b12185-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281951, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281951, "uuid": "a8b3bf7f-4492-411c-a0d8-b40a076a107e", "comment": "Malware payload", "value": "f686cfd2db47e788134df56733468a99", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281951, "uuid": "e52e5b7b-240a-4cd5-8909-9c04c135a725", "comment": "Malware payload", "value": "33870b3a386424aad3e62f5dcf6ad74ad4020dbc2bdbd5b3e323835840ac8c34", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281951, "uuid": "74d93ee7-6bd7-4f88-bc7c-f680a5d09a06", "value": "T147C423792756F0C46206F2FC828CBCD886EF14F98B9315BAC90FA545F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281951, "uuid": "3017b575-2894-4608-9766-c402b087b093", "value": "12288:uA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWQSFyorOIic/7MPx:hm6Jj6ESfUxZ91kmY/99z8dFXicT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281951, "uuid": "8cb68770-0ef0-4636-9c7e-f2d58ffbb8b6", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281951, "uuid": "683daf87-5a71-46cd-8132-0c6ce5d20b6d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6bed2d9-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281951, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281951, "uuid": "57841bac-1ecc-4bcf-9f27-d9d8bb033651", "comment": "Malware payload", "value": "9d680290f5ac5fe2f7404317251125bf", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281951, "uuid": "8b002edf-d101-4834-82fa-72354e452a10", "comment": "Malware payload", "value": "d2664c46e7088116323d963e4f532c7d98f38bc1e130eb709590d5d384fe6d2a", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281951, "uuid": "1022f493-7466-4bb2-81e8-c46f2b852cfb", "value": "T137B423CD64BED0A87B658DDA9FECFFD30CFC00366D7526F2A51C1A13A1C404B64A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281951, "uuid": "a9a38954-96f6-49bb-800d-2e6930dc3f4b", "value": "12288:uB/e4pqNFTFbEXk9DoGbDDGIabs/7iiEVwYg2l3/2Nyi:uBm4pgT3oGTabs/7iiWw0Di", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281951, "uuid": "19ac32a2-c011-49ec-8c7f-47a95db83234", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281951, "uuid": "3a878625-d752-48e6-9c71-8eb4278e0b9e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c70d9b32-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281951, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281951, "uuid": "af172cb3-4c53-4f9d-a00e-83b1cd53d2a2", "comment": "Malware payload", "value": "00ac42e726d98a8b64cbf240dd1585ca", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281951, "uuid": "26628b10-f167-4b7e-bedb-35b05cab55da", "comment": "Malware payload", "value": "1b9c3b99c4d80d61660391af93d76d6d36e568b9621dd11e233cb91c9762eaf3", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281951, "uuid": "62cd9a27-451e-4b8b-9b65-41d90a1a0492", "value": "T15FB423CD64BED0A87B658DDA9FDCBFD30CFC003A6D7526F2A51C1A13A1C404B64E95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281951, "uuid": "b13221a3-9929-4856-bea5-9b71389de60a", "value": "12288:nB/e4pqNFTFbEXk3DoGbDDGIabs/7iiEVwYg2l3/2Nyl:nBm4pgT9oGTabs/7iiWw0Dl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281951, "uuid": "0d402b70-292f-450c-93e0-7a6a7d9e6c2b", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281951, "uuid": "3ac8b7df-a32b-4241-817e-82ea2a57b611", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7581d27-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281952, "uuid": "0fac6138-0a74-441b-9e3d-cab1629452fd", "comment": "Malware payload", "value": "af5e2ccf224df5ac7dfa5184ccc87a59", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281952, "uuid": "260e415d-b8bb-4a07-8807-873b55d29fb5", "comment": "Malware payload", "value": "98b5623e63733cbbb90de48fb064370d51f496783517f0e7752067f08af5e683", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281952, "uuid": "4223dbf5-69db-4ea2-adee-ac30fb7289e0", "value": "T120B423CD64BED4A87B658DDA9FDCFFD30CFC003A6D7526F2A51C1A13A0C400B64A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281952, "uuid": "80d8bf2a-e82d-4178-80cc-aa4b7a118721", "value": "12288:IB/e4pqNFTFbEXkBDoGbDDGIabs/7iiEVwYg2l3/2Nyk:IBm4pgT7oGTabs/7iiWw0Dk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281952, "uuid": "39a3f395-26d3-47aa-bcaa-f21febf114c6", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281952, "uuid": "da8cafc0-dd5b-40b9-906f-bf2a2c24d984", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7704e35-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281952, "uuid": "869e34c7-0683-4c42-882f-9bbe9759f840", "comment": "Malware payload", "value": "e7f433a44d3165b3e18c68b2599c5d80", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281952, "uuid": "a4e7013d-96c8-4aff-81e3-b95185815160", "comment": "Malware payload", "value": "3345b1a52c9bc1ad63ff8eb0dbf64cf7cae2973de8d73743af3b2cfe4c3bda11", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281952, "uuid": "f372c274-e173-4806-bbe2-17b67aa73fff", "value": "T1FDC423792755F0C46206F2FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281952, "uuid": "79918689-22a5-4a47-91d9-f3d568355c01", "value": "12288:QA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWXSFyorOIic/7MPK:7m6Jj6ESfUxZ91kmY/99z8iFXicTd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281952, "uuid": "d966cfcf-e4ec-413e-b8b0-4bc6f4a77ce0", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281952, "uuid": "c9c7cfda-e6c5-4884-98e9-c284e4a05d17", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c77fab40-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281952, "uuid": "8b7cdd35-5172-4d21-8681-437750f3740b", "comment": "Malware payload", "value": "1654595597f04ce7a1e586238ceffc42", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281952, "uuid": "79e96e01-5bf2-4bd8-a18b-69cfbb044cf7", "comment": "Malware payload", "value": "3fddc156673ecf8f7dcaf79dd0db40a67acc5ecec4f97ea85bee200710d1df84", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281952, "uuid": "73a66a74-8b52-4344-b7a1-60f1250f930c", "value": "T176C4231DA0547B51F64B6A78B323CDB09B2AD03FD219C388A0840B399B5BE5769CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281952, "uuid": "0c36e27c-75e6-43f8-8565-42f5734fd7d1", "value": "12288:sMU+0xq75aS9iYIp6cP/G2Bku6zXL0HXP427b/:I+J71vI/GzXYftH/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281952, "uuid": "0dd62ccc-96f4-4fe8-94a3-11b521f3ca30", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281952, "uuid": "af7779d8-9e07-42df-a0f8-d2d71240e6b0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7910d71-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281952, "uuid": "af12799c-6839-457f-ac16-b06fa194d85f", "comment": "Malware payload", "value": "ac82863ff000fc6a3a8f08c519c606a6", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281952, "uuid": "e73f5f0d-85ce-463c-b471-647ec336740e", "comment": "Malware payload", "value": "3a916f86f7b8b893c755eb00877851cd174d631e653c40c0d77329814f6b05f5", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281952, "uuid": "3d7f2962-db0c-4a07-b648-a2282d3f2701", "value": "T18BB4231EF4D078CFD68ACDA394292C785F6C96C9CD126B7246C4EE9312442F627A44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281952, "uuid": "ad5c3357-b953-4f7d-8cf5-9f4085c9e025", "value": "12288:BTibgSMFBOBSlqruKu7FxPbzJTVBU+8JM9hAC8Z35VOBRkbKQDiUbpK+:IcSMFYwKkxpTKJM9mCw35VOMWAPbpl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281952, "uuid": "8468b314-6c85-4202-b993-f424e4bcba8e", "value": 525573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281952, "uuid": "77bfd790-ad24-47a6-96a8-e97ed84fdb3c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6235446c-2ba0-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281952, "uuid": "a89a3b67-5fcc-4435-8c5d-7c933d13c9dc", "comment": "Malware payload", "value": "dd392fdb5cd8099a52370ed9dfbe9abf", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281952, "uuid": "50d32c5a-673f-41d6-bad5-f25debcbc9d9", "comment": "Malware payload", "value": "a0d23acf275f8f13dfac0fd45ca4c88395363853d9886bd14e2c8faf60a5dde4", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281952, "uuid": "2a38e126-f353-44db-97d0-614b8740b779", "value": "T1E5B423CD64BED0A87B658DDA9FECBFD30CFC00366D7526F2A51C1A13A1C404B64E95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281952, "uuid": "a2607851-b6ef-455c-9030-5de1d8d30323", "value": "12288:fB/e4pqNFTFbEXknDoGbDDGIabs/7iiEVwYg2l3/2Nyt:fBm4pgTtoGTabs/7iiWw0Dt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281952, "uuid": "41a6143a-d18d-4f27-b1d5-a7ea97751663", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281952, "uuid": "b70dd5d0-ee60-4c69-b484-730ba6e7bba5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7cbefba-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281952, "uuid": "8ca9ea95-7ee2-4a9c-b768-9f7df4eb1fdf", "comment": "Malware payload", "value": "af8e311c70c02ef9f7412c06974cd8cc", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281952, "uuid": "9ab9de33-08b9-47eb-acf2-386dca5edda0", "comment": "Malware payload", "value": "de731b3ed1ced0eeed110323ecd88f430b4529f1843e3a8bc680ac7501f8236e", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281952, "uuid": "5cd528d5-b5c6-4d5f-9d9a-deaa754cd8b0", "value": "T1E8B423CD64BED0A87B658DDA9FDCBFD30CFC403A6D7526F2A51C1A13A1C400B64E95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281952, "uuid": "1390cd4b-1e7c-41b4-ac3b-88e726ac3031", "value": "12288:0B/e4pqNFTFbEXktDoGbDDGIabs/7iiEVwYg2l3/2NyU:0Bm4pgTHoGTabs/7iiWw0DU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281952, "uuid": "fb38714b-e418-4708-ab2d-9add9c01ecb7", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281952, "uuid": "9d74903a-1285-4901-aabe-1d4fc8d8bee1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7d9a206-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281953, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281953, "uuid": "aac27381-7e81-4e41-a482-9ebd6c8bb7ad", "comment": "Malware payload", "value": "33a3e8228d04c053678ba9476daed88f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281953, "uuid": "f7fb458b-14ec-4aa7-90e5-147afc71beb3", "comment": "Malware payload", "value": "35cca36816c8d029eb660c54cfdaa888f63cb884e295ad78b70639e309b32805", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281953, "uuid": "57fb4197-62d4-4b1d-9856-d0be9c3b1325", "value": "T105C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281953, "uuid": "8a17bc32-1e0f-41ff-afb3-081f84763c0a", "value": "12288:L+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byyH9I1P0QKw6FEw:L+QqldA/TSO713u7xnyH9IaQKHZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281953, "uuid": "8b7d4972-504b-48de-87f6-f72c79744bf7", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281953, "uuid": "673224bc-71cd-4df5-b1bb-b94413663761", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7e2fa63-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281953, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281953, "uuid": "4c1da0ec-50bb-48fc-a1a7-07ef2213b4de", "comment": "Malware payload", "value": "2194ca19a2eefdc2a5fe526b4f918ed5", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281953, "uuid": "2a232356-fccd-46d4-8850-19a2b402b8a8", "comment": "Malware payload", "value": "f735a20eb54ba2189535e5ad8c5ea8404d10ee00fb6098dc76c365c2cd5380a0", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281953, "uuid": "72b7a2d2-a468-425c-ad6c-eb4a4703eac7", "value": "T14FB423CD64BED0A87B658DDA9FDCFFD30CFC403A6D7526F2A51C1A13A1C400B64A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281953, "uuid": "f91bc985-6756-4742-ae9c-38aee472c48d", "value": "12288:0B/e4pqNFTFbEXkBDoGbDDGIabs/7iiEVwYg2l3/2NyY:0Bm4pgTToGTabs/7iiWw0DY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281953, "uuid": "c6eec4fb-6088-473b-8b80-5c4bbad10bdb", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281953, "uuid": "710f9484-f32c-49c6-a9d4-820e6c33eb75", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7f3cbdf-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281953, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281953, "uuid": "d7f1c4ed-44eb-4706-875b-312148028ad3", "comment": "Malware payload", "value": "609b03be2a814590433e9cd1f9c08283", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281953, "uuid": "54d9d708-1c28-42ba-a7e2-20109fac2784", "comment": "Malware payload", "value": "da1c6d0d5afa866a97c1a7e6cd8d68c8b20efe2c2950c83ccebe1b70a1f55ff0", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281953, "uuid": "3475f198-c7d3-45ed-94a4-2b640fc79b08", "value": "T1ADB42369227F71900C7543A84B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB195638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281953, "uuid": "fe8b5e04-d733-4db8-9122-3af22c8f8272", "value": "12288:p7JZAaFpeqqO3g/ALyYG0ZaDajTCXMO8xzDOe3WG:NLpeAA/f0Za6TCXKBxmG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281953, "uuid": "b302fe3a-2073-4e47-aad4-9fff9920aa1c", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281953, "uuid": "fd27f6cd-da61-4564-a365-a89320d9edb1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8682905-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281954, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281954, "uuid": "242ca4a6-437b-4142-a9fd-5bffaeb81c4c", "comment": "Malware payload", "value": "7833eaaddbdc5d6137470c70457b214b", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281954, "uuid": "81c63178-1a9c-4729-af5b-7fa322a88bfb", "comment": "Malware payload", "value": "1fcecc02fdd094578cf79b1b8eddc9c79f565e0c94b609118800d211bd658bda", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281954, "uuid": "a55f507c-e5a3-47e5-bedd-027e966a1013", "value": "T1C4C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281954, "uuid": "7a819a42-6eb3-43c1-a16e-4223b012b83a", "value": "12288:7+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byvH9I1P0QKw6FEr:7+QqldA/TSO713u7xnvH9IaQKHK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281954, "uuid": "bef7b53e-c55e-420b-bf7c-cf3527ebf937", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281954, "uuid": "445a3d90-30a5-4b46-ad8c-17c68497a76f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c87b1c95-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281954, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281954, "uuid": "dcbd6c74-1133-4d7a-9737-7dca37e536e8", "comment": "Malware payload", "value": "7123cf70217a1d6533be122b1535cf57", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281954, "uuid": "e648fffa-d531-4b60-b946-1cffbcb6ff0f", "comment": "Malware payload", "value": "c26f59c7b1bd4883f5c8ec4db06386ae72b950ddda19990bb8726fbc6ecfebc9", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281954, "uuid": "44ce0ae8-d607-4395-a13c-fb492a2fb234", "value": "T13DC4231DA0547B51F64B6A78B323CDB09B29D03FD219C388A08407399B5BF5765CE3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281954, "uuid": "2e9514e0-874f-45e6-8b04-16866e305b6a", "value": "12288:iMU+0xq75aS9iYIp6cP/G2Bku6zXLtHXP427bM:6+J71vI/GzXRftHM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281954, "uuid": "7e84a759-9852-4213-9118-f88c1d72521c", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281954, "uuid": "2cccfba6-a43f-4fe4-a390-24490dc14d50", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c939a206-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281955, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281955, "uuid": "9bcbc1e0-979c-4a3d-8c2b-e25f9689eca4", "comment": "Malware payload", "value": "b47961961ce39430d2effed6f2adbb0f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281955, "uuid": "eba8cfae-e7bf-42d2-b181-55af6fb60276", "comment": "Malware payload", "value": "c5f3b6cb4d3d2cce6ed3b528cfb0a427121a91743afa1cd3ea756c3f742025e0", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281955, "uuid": "8d625a4d-005e-445f-8795-e0e8ab1bc52a", "value": "T19FB42369227F71500C7543A84B468124FC3E5EB2AE00DD93EDDCAA4D8F9BB195638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281955, "uuid": "f2de2751-8dd3-4a52-a71f-ecfa68b97ebd", "value": "12288:G7JZAaFpeJqO3g/ALyYG0ZaDajTCXMO8xzDOe3WQ:eLpeJA/f0Za6TCXKBxmQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281955, "uuid": "106d0449-f6ae-4ed0-abdf-5275c8af870f", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281955, "uuid": "f9fc22f5-e30a-4cce-8342-f864a7c76604", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c93af664-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281955, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281955, "uuid": "32cf8018-234e-4614-9606-ea76d23ceb19", "comment": "Malware payload", "value": "61674c16fad0dfe98e978a0f08a4b9c1", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281955, "uuid": "cf4d11ed-44ef-4242-8215-9407c8fb15d0", "comment": "Malware payload", "value": "32c424293cc3811418037a6a3668000ff0a4337af08749ce091f084376daad4b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281955, "uuid": "c3152182-932b-49e1-ae60-7b0bb41f0099", "value": "T178C423B7179AB4897503E3E4814C6D9489AF20D957C3436ECA1E2693F5BE247FB200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281955, "uuid": "6dbcfb2a-3746-41e6-a77c-6fd6576ae5f8", "value": "12288:2eElNtIBB2gX3U5rA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ezw:2eSIBBfHhm6Jj6ESfUxZ91kmY/9HeU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281955, "uuid": "96b0a5da-ad16-44ce-97ea-e17e9ce09489", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281955, "uuid": "92223a13-abeb-4edf-9211-1c9cf4ac7c2a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c960a53c-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776281955, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281955, "uuid": "cc021049-31b9-4cdc-a4ab-41962babeef6", "comment": "Malware payload", "value": "fcb3e25f1d79c85834af6c51883068cc", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281955, "uuid": "225ad963-0a46-44d4-989a-14b755a074d6", "comment": "Malware payload", "value": "bc886217250ad25f638fec8b3b762e836e8f0dc7fb69f06508aebda10f5477eb", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281955, "uuid": "32a63e20-e1b7-4f31-959a-bcd632b41243", "value": "T1E6B423CCB6CB88CC55A63134E6A24B4154DBBF33B2DF7391B4B849700DE6A6710297", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281955, "uuid": "15058769-cd50-47fa-aea1-19442050c51b", "value": "12288:gwsK8MG1KnyC/G76u6M0gXar5qduvct2ien3P+beO:gKGcGmuwjHQen3Pw3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776281955, "uuid": "8eaadcf9-2c27-4ad1-a59e-3637e2d374de", "value": 515391, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281955, "uuid": "a915d429-f568-4f7e-bdda-afe4cdff317d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "469874db-3903-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776282165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282165, "uuid": "f0f1a3bc-d38f-49d2-a8b2-0ee2a0ed7fbf", "comment": "Malware payload", "value": "28dc8c82bf5f8942aebc8efa4df3e925", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282165, "uuid": "d917651d-8461-462b-8b14-87e6fafa566e", "comment": "Malware payload", "value": "492d56d2a3a2aae008c9b3b1cc18f4e169266e77ab115a03a2c7cfa2fcc2aca6", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282165, "uuid": "ecb45549-bdba-4391-8d84-6221e90d6b31", "value": "T151C423B7179AB4897503E3E4814C6D94C9AF20D957C3436ECA1E2693F5BE247FB200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282165, "uuid": "1bb57d68-18ac-4e72-9835-5f25a7990531", "value": "12288:XeElNtIBB2gX3U5iA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ezw:XeSIBBfHgm6Jj6ESfUxZ91kmY/9HeU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776282165, "uuid": "22b2c83a-ec2a-4fb7-b0cb-bbbc210cb7d6", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282165, "uuid": "d63b3f79-43e5-429b-b04b-3e66ee168d4b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4698d7a2-3903-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776282165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282165, "uuid": "327834ad-c6ad-4acd-81ad-e74df3306f3e", "comment": "Malware payload", "value": "8c3784f738de312d4ae33f4214e3212b", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282165, "uuid": "94a10416-708e-4d86-9c4d-e523ae8f3657", "comment": "Malware payload", "value": "496bcb571cd7921e8353314ae5d5cd0b762b532d31eff07aa341a83ee3625fe3", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282165, "uuid": "e8fb0873-2db4-46a4-a21a-8ee76e222c26", "value": "T164B423CD64BED0A87B658DDA9FDCFFD30CFC003A6D7526F2A51C1A13A1C404B64A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282165, "uuid": "14d5974b-c27d-45ca-8521-ed325067b912", "value": "12288:ZB/e4pqNFTFbEXknDoGbDDGIabs/7iiEVwYg2l3/2Nyj:ZBm4pgTFoGTabs/7iiWw0Dj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776282165, "uuid": "c7821cd9-6168-4dfb-a2a8-cdd58b92ff8b", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282165, "uuid": "fcd54698-32e6-4f96-9bbd-115b3fc66dd5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0306164a-3904-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776282481, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282481, "uuid": "4bc28565-df53-494b-86d4-60a4c2cefcf9", "comment": "Malware payload", "value": "222a1e9112ee3a5cc266ad67df8090ad", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282481, "uuid": "dcbaccde-0c2f-49fb-a9a3-5f17ac45d0e2", "comment": "Malware payload", "value": "4a34d0499660f9312fb0be419237b90f52d1c94f8d3c2db3e928414d5fcf20c8", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282481, "uuid": "057eb206-56f3-40af-a5a6-5c0c7f0de5e4", "value": "T10D24BD57B07673FE5EA4316A420EEDB48FA410A514F2FD85997B6818BBC0DC810F63", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282481, "uuid": "5cf7874b-ef0d-4953-beda-3e7182029515", "value": "6144:pgAZ8OVd3FK9+S9Dtd7d9mTmJoDOECxc1xDz/6pfC2fqAzrrw1f:xBPIASBz7d9NyDOnKdzYx7rw1f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776282481, "uuid": "4d3f8b7d-b76f-44e4-a71b-ff9446fd8f51", "value": 223302, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282481, "uuid": "ec900493-25e9-4639-9e88-4903be4e40a0", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68046112-1a39-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1776282909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282909, "uuid": "c42b029e-7b63-45ab-8790-15de7295a6a2", "comment": "Malware payload", "value": "c4374912473cd42cfe4e1abab51af40e", "object_relation": "md5", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282909, "uuid": "15358fd6-d4ed-46d7-aa65-77c33f4d289b", "comment": "Malware payload", "value": "212c76daf355ede116eb04d4f9d08a112d07940a14dc248bc568ff1ba0a64e18", "object_relation": "sha256", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282909, "uuid": "23588b74-2314-4813-89f3-971c099904b0", "value": "T13DD4F8B462047880C4AAA7729D74AFA8E23D11A9DFCE3ECC1194FAD01FB37557A0D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282909, "uuid": "d6292e9d-0776-48d1-8d7e-d9e1dc4ae595", "value": "6144:ZJSveutXkgEoCqT2741a3LywBTwjMtxwHVMeOF0buUwKB:qeuhra7T42MMQf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776282909, "uuid": "601e9e9f-898d-41bc-8626-ba808879f5f8", "value": 617316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282909, "uuid": "2800e2c5-8682-46fb-9b90-8ebcef3e4c62", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02b97177-3905-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776282910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282910, "uuid": "00e37c93-3896-40df-89a5-55e8699af5ba", "comment": "Malware payload", "value": "fe3ed60b695f128bd548e7cc370a93a7", "object_relation": "md5", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282910, "uuid": "596a5b82-2714-41c1-98b8-b3771ca096b2", "comment": "Malware payload", "value": "4a75ecd86cc98abb0197ad69ed74ec3108c496c96283c84477d9141dfe5ff305", "object_relation": "sha256", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282910, "uuid": "39bcd591-4d7e-41de-9c52-960a3d246998", "value": "T1DAC51A74B59878D1E96F8A77E2F5ED7D263723E2A5CB598C0215A3C20E93391FF048", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282910, "uuid": "03b9e549-0fc7-4b87-a80c-92765328d98e", "value": "24576:s7WWFLYWz4ZvpwUkyMInz3DtlQYUE6aD5RDmbeDAnvRWNL:f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776282910, "uuid": "3e6ee810-6df5-4036-bd7c-ef0110efa2de", "value": 2607104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282910, "uuid": "dbe9dba1-fc13-4ec1-9ec7-a79e2454f426", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040fbadb-3905-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776282913, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282913, "uuid": "272b473d-f6e1-4b9e-ab0c-3c31d7ccc995", "comment": "Malware payload", "value": "9a3c5d3a56ccb4e7726b9e955db9990f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282913, "uuid": "2f06bc97-c3ef-497a-bf08-cbe3f77e5c50", "comment": "Malware payload", "value": "8a6f081cbc7521fccbb98c5f81ba3fbc311fb28fec0907075bc57e52c217b91b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282913, "uuid": "48256e0b-71a7-44a7-b489-03af1216d5a3", "value": "T108B423CD64BED0A87B658DDA9FDCBFD30CFC003A6D7526F2A51C1A13A1C404B64E95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282913, "uuid": "58f30b6f-643c-422b-bff8-272a79a6ede8", "value": "12288:SB/e4pqNFTFbEXkNDoGbDDGIabs/7iiEVwYg2l3/2Nye:SBm4pgTHoGTabs/7iiWw0De", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776282913, "uuid": "1c792ce0-f813-4ced-9659-e9b3a3d08cdd", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282913, "uuid": "e8d332d7-28c4-4f11-bcc3-676136d76a6b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4518395c-3906-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776283451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283451, "uuid": "15bafdce-721f-4613-84e7-410c00da3a62", "comment": "Malware payload", "value": "865ab3189f14cee655053fc2e59c8131", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283451, "uuid": "dd952f40-cbed-495a-bd0b-95fd37a360ca", "comment": "Malware payload", "value": "a111172b18ac1f2c844b26d7bf68285700d08a9d995bd848c74da89493f7d9d3", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283451, "uuid": "be94a85b-00b8-4daf-bcef-7bf374efb5d8", "value": "T18DC4238BA3FE845390BF1F58AA57B48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283451, "uuid": "ad5b70bc-fda7-4e89-a71e-eb43d157a850", "value": "12288:n+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byYH9I1P0QKw6FEq:n+QqldA/TSO713u7xnYH9IaQKHf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776283451, "uuid": "8a1f5e39-0323-48d3-a295-7461d1e8eed8", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283451, "uuid": "5feb5de5-35ca-4781-a527-e88ad9d6cc07", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4526a089-3906-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776283451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283451, "uuid": "bb144390-9426-4274-a3d2-28037658a193", "comment": "Malware payload", "value": "0349f9fdbf9ce951009732d889d2735e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283451, "uuid": "db06fd8c-9a38-4de7-8bd6-df445b159aa5", "comment": "Malware payload", "value": "1db7c725d2c1d4090f1c8a806013bcf8302f66b80eeaee69930bce0daa462bd2", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283451, "uuid": "86bdbfaf-5354-4e11-95c1-36e153e6cfe8", "value": "T1BEC4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283451, "uuid": "995b478b-8577-4b27-aa28-e5c9007eeded", "value": "12288:b+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2bymH9I1P0QKw6FEg:b+QqldA/TSO713u7xnmH9IaQKHF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776283451, "uuid": "6582f303-2c4b-4d17-8215-f6b89147c0dc", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283451, "uuid": "3eb0c0ed-db14-477f-a2e9-94f39ba53bd9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45456091-3906-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776283451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283451, "uuid": "61b1ee5e-626c-44b6-96f5-d0a422eae989", "comment": "Malware payload", "value": "7de2db06a11bc58778e4e6e87b97ff17", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283451, "uuid": "64fdb2d3-504d-4a22-be96-1dc402a79f9d", "comment": "Malware payload", "value": "cd72333145253ee142278eac93687f92f6bdfb9ccef2a473edf8b9e17bd311e8", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283451, "uuid": "a3987cce-fb71-4e74-a751-ffccf7495bc0", "value": "T1C5C42367226F72500DFE92ED4E4156186D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283451, "uuid": "72688f95-7a40-4c49-94e2-a24643df50bf", "value": "12288:geCEhto9qO3g/ALyYG0ZaDajTCXMO8xzDOeQakM:ntSA/f0Za6TCXKBxl/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776283451, "uuid": "3c489eae-2682-4361-ae9e-7758bcc6f3c7", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283451, "uuid": "dcbe336e-dfcd-4264-af7f-a2e7a0603bc0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4566500c-3906-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776283452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283452, "uuid": "58c04081-b699-4b6b-b963-10f933367559", "comment": "Malware payload", "value": "fd200ed507ae34944f745cf3774cc208", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283452, "uuid": "787c96b5-9324-4758-8b78-f3a622b5bd86", "comment": "Malware payload", "value": "1539cc3abeb04f41489b61bf844f9b6727cb7186dd83ad69f7f8ea5356dec841", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283452, "uuid": "d9185761-fe62-43d4-be55-65278838cb78", "value": "T122B42369227F71900C7543A94B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB195638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283452, "uuid": "72551145-15f1-45fe-ae7f-68e4828bd726", "value": "12288:O7JZAaFpeZqO3g/ALyYG0ZaDajTCXMO8xzDOe3W8:WLpe5A/f0Za6TCXKBxm8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776283452, "uuid": "24f6220b-c47d-4f0f-acfd-a210c4223859", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283452, "uuid": "b9036384-64f9-47fa-b20d-28a63c74ea7c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4574998d-3906-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776283452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283452, "uuid": "560c4449-e909-46c7-88b8-3edddac926ce", "comment": "Malware payload", "value": "741e99b15108948a2a894aff3700368d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283452, "uuid": "515194eb-6c9a-440a-9c72-e5368fde079f", "comment": "Malware payload", "value": "9e9c4fb176b09c0366bc0286c94faff48006d308bb6e6c3e2b1fae110bab0c9b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283452, "uuid": "6bb62c81-bab3-439a-a369-33f8ab5bcae9", "value": "T165C42357226F72500DFE92ED8E4156186D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283452, "uuid": "850f5141-7250-45dc-9d1f-199f2181fd82", "value": "12288:weCEhtQ9qO3g/ALyYG0ZaDajTCXMO8xzDOeQakk:Xt6A/f0Za6TCXKBxl3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776283452, "uuid": "500fa6fa-d177-4afb-b8be-5a0a6b842d60", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283452, "uuid": "c6fd3aba-b631-4f69-9e0a-d9b8f898eec2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45a279a4-3906-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776283452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283452, "uuid": "80c57b79-d639-4ef4-8668-691680e7031e", "comment": "Malware payload", "value": "eda7cc3299807c5c151cc37bc3b7bd96", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283452, "uuid": "7c75e8b1-0c90-48d8-a3e1-82278868a131", "comment": "Malware payload", "value": "cfb30eefec5d120a08fccbf1c2b8a9bd9d346ca32d135ccab300322785b0185b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283452, "uuid": "720acd07-14df-4589-a842-9e4f98496f98", "value": "T166B423CE5B286CAC5BE85E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283452, "uuid": "b67bae88-9e52-4ef9-adb5-3cb67d5c8a15", "value": "12288:BGRl4nbDDGIabs/7iiEVwYg2l3/2NH3y+wK8d:tTabs/7iiWw0KCxd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776283452, "uuid": "662e8c60-6e02-470c-b367-25c199539e25", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283452, "uuid": "d39ba5ab-6cdb-4622-bddc-5f0049bb15cc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45c1047a-3906-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776283452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283452, "uuid": "8cdae55e-26a9-4faf-a46f-699bcefae3a0", "comment": "Malware payload", "value": "26cf6dbcc168bf73a7e753756ed4253e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283452, "uuid": "c1813881-4cd4-4f2e-977d-07debb35ec67", "comment": "Malware payload", "value": "6e8d7813901c5f6fa92d7eae3b8f91c7f8061aaaa64742d9f2dda8ed4c285e07", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283452, "uuid": "4babaf2c-04d3-4c3f-a25e-2fbbdf1d4d9e", "value": "T1FAC4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283452, "uuid": "bf28a5f5-d51e-406f-b24d-a8399265b295", "value": "12288:7+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2by7H9I1P0QKw6FEb:7+QqldA/TSO713u7xn7H9IaQKHe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776283452, "uuid": "2b950cc1-8faa-46ef-867c-fdc17cf06b2b", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283452, "uuid": "9d99e891-1819-4dde-ae0d-fa6ff3171a70", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45ee89fd-3906-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776283453, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "f83439e8-a9fc-4054-89ce-df225456c34f", "comment": "Malware payload", "value": "17370aad0badba46c08d600bde801d5f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "d0021066-c3b5-42a4-bbbc-1deec48b2687", "comment": "Malware payload", "value": "bdd6b8a0975c80043cd901744190dbe7b80b527c0627a308eb22fdf8a322b616", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283453, "uuid": "355aeec2-6342-4da2-85bf-0e3efc024e00", "value": "T17CB423CE5A286CAC5BE85E834F6DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283453, "uuid": "0ea58cd0-aabb-4cbe-9d6c-ba492aab4247", "value": "12288:rGRl4nbDDGIabs/7iiEVwYg2l3/2NHWy+wK8m:TTabs/7iiWw0KRxm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776283453, "uuid": "af48eef3-7181-47bf-b363-99c010da45e2", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283453, "uuid": "e7fc8b66-e91c-4299-b326-f86035c48e14", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "460e45b3-3906-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776283453, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "7e72d098-c037-4e71-b55e-ef00d2cd9742", "comment": "Malware payload", "value": "19482badca768b9483ab55a7cd35927e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "bbe08662-7c0b-44f8-93e6-a1a05672ef64", "comment": "Malware payload", "value": "0d1d10a9b8ea320c31da4f8ca0921b42481cd96dedbe18d7d34f70a63c065ff7", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283453, "uuid": "fc346053-d957-4af1-8192-bade1d387e2a", "value": "T1D0B42369227F71900C7543A94B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB195638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283453, "uuid": "a21ba91d-373a-4182-aef9-e059d9c10698", "value": "12288:d7JZAaFpeWqO3g/ALyYG0ZaDajTCXMO8xzDOe3W+:hLpecA/f0Za6TCXKBxm+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776283453, "uuid": "b6e1ecad-4fce-417c-bd59-4a17520dc2f2", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283453, "uuid": "39e5053e-850f-4556-987e-d264bdfa938f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "461551c2-3906-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776283453, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "070f3149-3ea4-4715-9a8b-dec8964c98b2", "comment": "Malware payload", "value": "6243257917139217a497c697fdb5be33", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "53c78df8-6d89-4444-aaa5-ba6b6c4cecf4", "comment": "Malware payload", "value": "475ec36b77b12b689ad69630be17d628d3c5b78c62877656eba0b1a364b84f38", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283453, "uuid": "84901b78-5a22-4c5f-9d99-c9122c6465af", "value": "T1F3B423CE5A286CAC5BE85E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283453, "uuid": "d5b25798-c2f8-4d32-a738-fc985add1fa1", "value": "12288:JGRl4nbDDGIabs/7iiEVwYg2l3/2NHhy+wK8L:lTabs/7iiWw0KExL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776283453, "uuid": "63d81cfa-9f20-4999-ae8a-4ab3e93b3103", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283453, "uuid": "77f292de-537f-4e5d-9b2b-250abd18fab3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4620493e-3906-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776283453, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "428c393d-a70e-4f07-9b9f-6124fda391d9", "comment": "Malware payload", "value": "4a44f026b99dcee5edcff9f39f8ae65a", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "e7b9a592-ac7c-474f-94a8-0b7a01eb0e5a", "comment": "Malware payload", "value": "6de64ba226d5d48cc197a6922e7ab2701a795f2f10fdf61c2fd51c55495c78fc", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283453, "uuid": "11c0d693-eb06-474b-8240-249243832dd4", "value": "T19AC4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283453, "uuid": "d46b0dfa-705b-4886-85c4-225d4887e286", "value": "12288:b+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byYH9I1P0QKw6FE2:b+QqldA/TSO713u7xnYH9IaQKHD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776283453, "uuid": "8aa77e49-f7ee-4ae9-8086-d0aa4c79c7e1", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283453, "uuid": "e696ceba-f0e0-45ec-89f5-4a9e38f88aa4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "464b0891-3906-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776283453, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "76ef2add-2e2a-48c8-80b6-781662cb6cb9", "comment": "Malware payload", "value": "ed38ba4a9c9c3af8addb9123ecb57aca", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "7b9589c3-bb9d-4a93-9317-91c789a3f062", "comment": "Malware payload", "value": "da489966e7f02477a8cce02e2e4d03eaf92a7e6230a539d946d6eac32cd1498e", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283453, "uuid": "5a26a98d-0ff9-4ce5-804b-30fcfb46ba19", "value": "T136B423CE5A286CAC5BE89E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283453, "uuid": "8f8c0a38-49b4-4f98-88c1-209653b9ed8f", "value": "12288:1GRl4nbDDGIabs/7iiEVwYg2l3/2NHLy+wK8F:pTabs/7iiWw0KmxF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776283453, "uuid": "5f25c1bd-7d06-4ce7-9975-1eabcdfcbc6a", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283453, "uuid": "2201d042-1606-42e5-9b1c-f3bb940034bc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "465cdc2b-3906-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776283453, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "79dfc9bb-bf49-48fa-9143-5949fb284780", "comment": "Malware payload", "value": "f19bc0ab4fc2f0b5f69800e5be2fd0da", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "fdc45e94-3eb1-4dd1-af80-3a5027fe1c65", "comment": "Malware payload", "value": "0d3e32f542f7bb3112f80e15a9a44fd71ea78d4d0e50ce01df087d14e10be7ba", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283453, "uuid": "d2ec67ee-dfa6-4615-a6cc-d6bb606fd113", "value": "T1EDC4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283453, "uuid": "85a35fe8-72c6-4108-afe0-544732adca4a", "value": "12288:f+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byzH9I1P0QKw6FEP:f+QqldA/TSO713u7xnzH9IaQKHq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776283453, "uuid": "e0deb40e-5b71-4c58-aa6c-f26ee1dbe562", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283453, "uuid": "856141d3-453a-47ac-aa3b-aa7063b7de14", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4678aeb0-3906-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776283454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283454, "uuid": "65f5f4e6-800e-4960-a1f7-ce3f955acaba", "comment": "Malware payload", "value": "c78141e739f98fca76943c2147c4ffb9", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283454, "uuid": "92149cf2-790b-417f-89e9-f4026a86c783", "comment": "Malware payload", "value": "d6140344b789b8e80593f736a09266c2d37fc8192c278e1d16e7290881a65a97", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283454, "uuid": "cd20bd3a-ae99-4fa4-922b-33d5bcff24f4", "value": "T1F9C4238BA3FE845390BF1F58AA57B48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283454, "uuid": "546f6e42-620c-4b42-809f-2e6ffcb6197a", "value": "12288:L+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byUH9I1P0QKw6FEK:L+QqldA/TSO713u7xnUH9IaQKHP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776283454, "uuid": "32054e19-5247-43f5-aaff-7cbc188a9c13", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283454, "uuid": "73ae8a92-de5a-4c4f-b745-8280dd464aa7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46bc9592-3906-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776283454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283454, "uuid": "6cbad1df-20a4-4025-996a-732d5619f684", "comment": "Malware payload", "value": "45ef45bd403bf064606b5d9ca2922aeb", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283454, "uuid": "5032c760-cb53-4347-8772-f867e96a06c1", "comment": "Malware payload", "value": "a179c423132df0c42d282794540e71fab9264ce11b22a25d884331e05f4a8665", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283454, "uuid": "ce5addb4-a835-45e3-aeb5-5003b0ab7644", "value": "T1FFC4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283454, "uuid": "126c2d7e-4c7c-42dd-96d4-37eb9bd41b75", "value": "12288:b+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byKH9I1P0QKw6FEM:b+QqldA/TSO713u7xnKH9IaQKH5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776283454, "uuid": "870e80e4-e42a-458a-be83-90ec672f891d", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283454, "uuid": "b5201ae0-db0d-4c21-99d5-7511407b9fa6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46ddd0fc-3906-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776283454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283454, "uuid": "2e9c0755-1af9-4339-830e-07e801a329a5", "comment": "Malware payload", "value": "739feab67ee3a67b38a753e482e664b1", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283454, "uuid": "b2895a44-be23-4983-8d41-fe9144664c72", "comment": "Malware payload", "value": "8c3c37d6b830a6637c45e85fa49ad671875e21662b0359649e1a95399e33e6c2", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283454, "uuid": "3cd494f5-573f-4058-9642-c71446df1652", "value": "T1A1B423CE5A286CAC5BE85E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283454, "uuid": "1d6ced65-16c7-47cb-8f7d-8b8a9c2535b5", "value": "12288:FGRl4nbDDGIabs/7iiEVwYg2l3/2NHzy+wK8N:ZTabs/7iiWw0K+xN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776283454, "uuid": "c0863ae3-81a3-45c8-8603-6a1987aa5f3c", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283454, "uuid": "147b5b41-b8fd-4522-af41-1a0b42072293", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c801aaee-3906-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776283671, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283671, "uuid": "a0128413-c8f8-4a65-9f85-1f15bf11e183", "comment": "Malware payload (Mirai)", "value": "910dd8984f06856483314dc1cd832a7d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283671, "uuid": "97a7b30b-31e7-4c20-985d-c1d31c3b2a67", "comment": "Malware payload (Mirai)", "value": "e26180196a1b0993d10b6f36446eaee8f2e7c11153d42bdacca76128daf438ff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283671, "uuid": "2c0a648c-89bd-4d9b-85b0-c4b5fd4605e3", "value": "T1FCC31A45FC559B17CAC226BBFF4E438D7B2A0768D2EE720399156F30378B55A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283671, "uuid": "0e7b67a7-a021-444c-9b18-49c48056ab7c", "value": "1536:+vz/v9F6Ayc/fwfTPJTyMeI3uOJ0x4dBIFNlejwyw1cj4lZorr+VbyPZpoR6cvF:+7/lF6qnwLJGMN24GGBPpqF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776283671, "uuid": "233a5264-da29-4fd3-af2e-723132777dca", "value": 125472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283671, "uuid": "fd0a3c25-1755-4ae6-b61f-a56143d1687e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ed98640-3908-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776284353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284353, "uuid": "c046ed0a-2d13-4f15-801b-0d38276a3e15", "comment": "Malware payload", "value": "f0a89d26560d829029d0579a053f8faa", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284353, "uuid": "473208f2-f745-4c33-950e-76264e7e740b", "comment": "Malware payload", "value": "a50f0ec26e1b58699c5a4272e04b4c3743e0c2dd75bcf673d724d10fd08ee575", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284353, "uuid": "603c9a4e-4850-4804-a46e-10306b7ff068", "value": "T193B423CE5A286CAC5BE85E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284353, "uuid": "1a48754d-9ec2-4119-abba-651606ad5a67", "value": "12288:ZGRl4nbDDGIabs/7iiEVwYg2l3/2NHxy+wK8z:VTabs/7iiWw0KUxz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776284353, "uuid": "7e74c65f-3c74-46c4-a332-8bea4095caf2", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284353, "uuid": "6ae0af53-9820-4218-96f4-bdc5f66edd8d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ee5d2a6-3908-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776284353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284353, "uuid": "e24c8b3d-5df6-45e5-b675-e15bf9c9df2b", "comment": "Malware payload", "value": "116f0512a279eddb7ce2f51f575a1fed", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284353, "uuid": "d758df41-1c23-4c70-83be-617014603d98", "comment": "Malware payload", "value": "276dde191e5c6b6b5b468d1c6ac0d65c42d83a019460f5d413dbaa78938995dd", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284353, "uuid": "a5dc917a-0516-4592-ae6a-f12232be6f66", "value": "T12EB42369227F71900C7543A94B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB195638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284353, "uuid": "3864ff65-6b82-47f9-80dc-1d694844d19a", "value": "12288:o7JZAaFpebqO3g/ALyYG0ZaDajTCXMO8xzDOe3Wc:0Lpe/A/f0Za6TCXKBxmc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776284353, "uuid": "3132cfcf-158e-4cc6-b5e7-244fafc3a528", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284353, "uuid": "f94ac50a-3484-4df4-b95d-9ac43fd87224", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ee8a429-3908-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776284354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "d478dca8-77a4-4d64-8444-8400baca63c1", "comment": "Malware payload", "value": "7cda99fb190f47d80c711ee256f397e6", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "6764f795-fc4c-4b4d-b66e-97340f03592b", "comment": "Malware payload", "value": "e9fac39936c1536edb2173829c0e1f7d0ad70f541bba3a766722902ab5148ceb", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "80bd2218-37c1-41f5-8c2f-070fa085cb72", "value": "T178C4231DA0547B51F64B6A78B323CDB08B29D03FD219C388A0840B399B5BE5B69CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "08097996-3d86-475e-bda7-78eea87e8f9c", "value": "12288:wMU+0xq75aS9iYIp6cP/G2Bku6zXLAHXP427b/:k+J71vI/GzX8ftH/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776284354, "uuid": "3e6d29b1-70dc-417f-844b-870dc63d71d7", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "a5046793-324c-4543-a395-8593dac5d5dd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ee90986-3908-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776284354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "8414e619-b7c9-4635-96f9-92d58f33e83c", "comment": "Malware payload", "value": "b1c918ef1e80855a312a05fb049e155d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "2caba76a-4b71-43d7-9892-febe83bb5e7d", "comment": "Malware payload", "value": "ec8872487f6b38e9197d6424a2bb1e8344dbd89952f81e0d8f9d4e5a8bac1c16", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "c785d0b3-79cd-4df7-a33c-09cb4ef3192d", "value": "T160C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "b3eafa40-6552-478b-b3ce-0c541f3f9707", "value": "12288:r+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byOH9I1P0QKw6FEw:r+QqldA/TSO713u7xnOH9IaQKHd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776284354, "uuid": "d44fc015-8a5f-4fb9-a118-530945582aef", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "80eebd7f-0376-4edd-b7d5-1ffcbfe523aa", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5eea8c91-3908-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776284354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "35ccc5bd-87c0-4d75-be17-934cc68f229b", "comment": "Malware payload", "value": "28f979f446820f7e82d4f8d1f5a5cadf", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "774f54cb-9430-4b0f-8e9b-ec53885b430f", "comment": "Malware payload", "value": "e1346d468d96023a2fc02459299b8ebe31dd6774a1802146c935a33a76ed3687", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "0d843bdf-a7c1-4351-9315-386f2ceb02bc", "value": "T197B423CE5A286CAC5BE89E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "340affe7-40f6-4934-96d0-25fe56668e38", "value": "12288:LGRl4nbDDGIabs/7iiEVwYg2l3/2NHSy+wK8m:zTabs/7iiWw0KNxm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776284354, "uuid": "38b0b6e9-b15c-47b0-8e74-f3a873538510", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "987efe73-8557-401b-bd3e-6632b8d31968", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ef5963f-3908-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776284354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "de0c3222-0d65-490f-b06f-990b954433b4", "comment": "Malware payload", "value": "9007a7235201eda5f1ab72d62dabefde", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "7e326242-0c73-4439-9d8a-29a19580e48e", "comment": "Malware payload", "value": "45ae67df1266fdd1afa5183f5be2f0fe2a3a55d24649434de381854c7c40b99f", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "c0834361-e945-4065-be62-e167df3de931", "value": "T113B423F193429E0B23A4DAB457A3DB3375CE7292769D9311CA06CA9F4C7072886DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "e4e52178-67e5-4ea5-9888-20260cc8c389", "value": "12288:qkmht7Drvdyi6CCH1oHF9nJ/qjuyVgoJrrzTPwk8:qkmHzMPH1ELnKVgoJnnI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776284354, "uuid": "ae7c430c-8526-480d-8292-60be4a8f86dd", "value": 493748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "ea3fd56a-50af-47ec-994b-c59f99e75057", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ef85aa0-3908-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776284354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "f2eba22e-8584-46f1-b234-5664edc1089c", "comment": "Malware payload", "value": "9b8ce0648b4a98f03ea87678bb8dd3fe", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "8874ad19-f1cc-463c-884e-931f7e8ddeba", "comment": "Malware payload", "value": "2a0fbc2ced724952606a681069fb45d5b16b722014f7fa37198bf53861a44dd1", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "0bb8967b-c2e8-4efe-824e-7528cf2def70", "value": "T1E9B423CE5A286CAC5BE89E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "09bd5225-d146-4c82-975f-49bfe7f09010", "value": "12288:TGRl4nbDDGIabs/7iiEVwYg2l3/2NHGy+wK8C:LTabs/7iiWw0KBxC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776284354, "uuid": "8a713528-f494-4838-a478-1c8f3c1978c5", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "5ceff4b1-910b-4cae-bc2f-1a7e8e07fcc8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f004e63-3908-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776284354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "a39a2012-e2a3-4f2e-9970-7a3bbc03b6c4", "comment": "Malware payload", "value": "0e7db908c8bc90bcd46c32f8fd376c04", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "60873fc5-5004-498b-9ba0-2769f5fcd269", "comment": "Malware payload", "value": "dfa7607fa5ca7baffa7f0db850e163c1b207fb9545580b277114cb0d7b9b0d2f", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "7849e528-1ca8-411a-abd7-601fd97707e8", "value": "T1F8B423CE5A286CAC5BE99E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "21efb444-c53b-4230-a96c-afeb49250a6e", "value": "12288:7GRl4nbDDGIabs/7iiEVwYg2l3/2NHqy+wK8O:DTabs/7iiWw0KVxO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776284354, "uuid": "63639bee-915b-482f-8962-adfb19fcf1ca", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "568fec82-c127-42ce-8149-272438bf801a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f4b4edb-3908-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776284354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "afc77bb4-61af-42bb-bde0-518ea06b4293", "comment": "Malware payload", "value": "639fbedff0f53e42a33a74a2199ad50d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "83d1998a-a0a1-4b24-8b29-b1e929191827", "comment": "Malware payload", "value": "70b73618803bb3ca6a45de78aa755baacbcd73b7ead4650e9929646e33a36970", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "50515a14-3a4c-48cd-a2bc-7df79b37ccb3", "value": "T199C4231DA0547B51F64B6A78B323CDB08B29D03FD219C388A0840B399B5BE5B69CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "aa5ddb11-a995-4826-87fd-69ee2180668b", "value": "12288:WMU+0xq75aS9iYIp6cP/G2Bku6zXLNHXP427bM:G+J71vI/GzXpftHM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776284354, "uuid": "0a86b97e-7746-49c6-aab4-3c9d7082b8af", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "541d76bc-41f2-421d-a719-d1dba26c1134", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f55ee81-3908-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776284354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "530937ca-d9a7-4940-baab-07426d74bd0e", "comment": "Malware payload", "value": "2c89f85abd83ec708cb42b39c4b94038", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "ea7effa8-d7e9-44a5-a74a-4a1fa469b5e7", "comment": "Malware payload", "value": "8c9a17d515f9ef296460a79d37bbfe411d6e4b133e6daf650d217c50af78f098", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "ea14979a-7030-40f2-9943-572e4dfc22aa", "value": "T144B42369227F71900C7543A94B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB195638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "2f575701-3c0e-40bd-ae01-880ae87a8ead", "value": "12288:S7JZAaFpe1qO3g/ALyYG0ZaDajTCXMO8xzDOe3WU:KLpe1A/f0Za6TCXKBxmU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776284354, "uuid": "588f1aa6-2834-406e-93c9-fb5a22383257", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "e2c5a69d-ced8-479f-8931-8dc3e2b7a554", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f6acd12-3908-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776284354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "2534720c-2154-48a6-8e55-f34c342cfd3f", "comment": "Malware payload", "value": "4812d1fb85a1a4ce68d79226f7589013", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "7e9c4eef-c90e-40b1-879f-47806bf3a06e", "comment": "Malware payload", "value": "856d5ca5199c4cfa11fdcfd1c1981232718a97c33a475168d2c5dab723e15b7b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "2576ea19-e6b3-42d2-ac13-90c600876b4c", "value": "T119B423CE5A286CAC5BE85E834F5DBFDA2DF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "904c3742-9fda-49c2-b953-1e018c7758e4", "value": "12288:ZGRl4nbDDGIabs/7iiEVwYg2l3/2NHly+wK8v:VTabs/7iiWw0KYxv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776284354, "uuid": "39dbb975-4279-401f-8031-8ddc1184d4d1", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284354, "uuid": "3fcca675-f2d5-4c3c-b2fe-fe044a68eae1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f8b76bd-3908-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776284355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284355, "uuid": "b0d39fc2-ad26-4a1d-b7bd-6ac5dabe0a96", "comment": "Malware payload", "value": "8074529a491f9e38afa7c11fbd9690a7", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284355, "uuid": "e0c15806-6c60-4669-96dc-0cfdae977c80", "comment": "Malware payload", "value": "4204ab1a0f7d5177c93a43c9583c5e0f82586e9e6b09833049873504a296d550", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284355, "uuid": "c225a8eb-dbbc-4089-a8fc-bc67a6d75689", "value": "T176B423CE5A286CAC5BE89E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284355, "uuid": "d208b232-32cc-440f-9c45-7c7f3d9f81d7", "value": "12288:xGRl4nbDDGIabs/7iiEVwYg2l3/2NHDy+wK8F:9Tabs/7iiWw0KOxF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776284355, "uuid": "59541d9d-2031-4f4f-bd18-041fe47c0060", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284355, "uuid": "1865a425-634b-41a1-b67c-57d0762371bd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "600a735e-3908-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776284355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284355, "uuid": "0addb7b2-3646-4e9e-84d5-c39029200521", "comment": "Malware payload", "value": "32f496df0baeaa9561cc0346e80dbff2", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284355, "uuid": "e93d0b70-2a52-41f1-a3b1-d1138b238ec5", "comment": "Malware payload", "value": "2a14de0c080a5c4fccd2e70fdd2e2f7ff7a8354fdfa3d41a8697076b2a376eb4", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284355, "uuid": "1d025920-4ae9-4fe8-8fdb-74864a2eb630", "value": "T1CBB423F193429E0B23A4DAB457A3DB3371CE7292769D9311CA06CA9F4C7072896DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284355, "uuid": "c95717f7-9225-45e8-bb78-06836dcd6d3b", "value": "12288:dkmht7DrvdyiBCCH1oHF9nJ/qjuyWgoJrrzTPwkz:dkmHzMmH1ELnKWgoJnn3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776284355, "uuid": "7c7f6b05-5ef2-451d-a642-db46646adc5b", "value": 493748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284355, "uuid": "2e4e97c2-2daa-413c-9fd5-3c0b2bcec1c2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "603e7f11-3908-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776284356, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284356, "uuid": "11f9e45e-d7b0-4d19-829f-b25f578f7f18", "comment": "Malware payload", "value": "fbaf06526727d3603c343940c084fc11", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284356, "uuid": "fe541f1b-022b-47ab-86cf-afe2fa875378", "comment": "Malware payload", "value": "c512fb15cc691baced6c7930fab552fd7fb92403faa0b30cf257ecc965e08f6c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284356, "uuid": "6cb914c9-99da-4fb9-a4f0-ee6256a19bdd", "value": "T132B423CE5A286CAC5BE85E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284356, "uuid": "cf5de23b-b47a-4c8c-9d1e-0868edb5904a", "value": "12288:JGRl4nbDDGIabs/7iiEVwYg2l3/2NHJy+wK8b:lTabs/7iiWw0Kcxb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776284356, "uuid": "18b0620b-3c90-48e2-b65c-563bb2542153", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284356, "uuid": "5dd456a0-9fa0-417f-952e-a4b81ee07a66", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60a83ada-3908-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776284356, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284356, "uuid": "5dd80ee2-4998-4511-9515-ae096654e055", "comment": "Malware payload", "value": "f5c540d101a64a326530fa65fbd8a233", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284356, "uuid": "4dd74be6-b58d-4bee-902d-d4aed0334c89", "comment": "Malware payload", "value": "0a9deeacb3b88182eabb2839c18614ca85817f799529cef204bb68549229c4d9", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284356, "uuid": "3d572d7b-fbb7-4079-be19-b7969ffdffaa", "value": "T1D0C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284356, "uuid": "77ae6e21-2682-4217-b9c5-d18d83ec1fc9", "value": "12288:X+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byZH9I1P0QKw6FEJ:X+QqldA/TSO713u7xnZH9IaQKHU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776284356, "uuid": "c269afdd-a9d9-4ebe-ad74-3c1f8dfaed73", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284356, "uuid": "cb611e73-818b-421a-9483-ba3522f346c4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "991fc5ac-390a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776285310, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285310, "uuid": "336e92a5-4edb-48a2-80ad-6de164d40061", "comment": "Malware payload", "value": "60062baa912aa96ef51580cb2ab3199c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285310, "uuid": "b24dd1ee-a51e-4dd2-afbd-f26210b97e32", "comment": "Malware payload", "value": "8785ac39792e282d8c2af59c5205146b228dec54e8206985baef8feeb96ea8c7", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285310, "uuid": "93ec5d28-6861-4644-91a3-94bace5a65b8", "value": "T16CC42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADE7ED06DE52A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285310, "uuid": "079acfc6-aad8-431c-82d9-6b705b59c626", "value": "12288:n6wlOMWROC/FTeHo22Qm7NzofOr68mNeA924EwCf:/4MQOC/gHozN7NzomW8bA9Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776285310, "uuid": "3de523fc-6c87-46ec-9158-ce214177d3f9", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285310, "uuid": "078a7458-ade1-42f0-949e-8add86861177", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a05d38d-390a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776285312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285312, "uuid": "2e1bec87-6dbb-48cf-be76-eb9c6935d0a4", "comment": "Malware payload", "value": "e0934bcaae8c7d1af53558bc5e0821a5", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285312, "uuid": "29307225-32a6-4621-9a6c-cf44ab3d1dba", "comment": "Malware payload", "value": "cfe5d56e131196396009102a1b9d60665f8016d91593ea6f270b0c587d5d5ba1", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285312, "uuid": "f3641ca2-8404-4611-8331-5f89377af7e5", "value": "T175C42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE92A173C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285312, "uuid": "3a5b8ecc-3670-47f4-815c-abbc2b36ef13", "value": "12288:X6wlOMWROC/FTeHo22Qm7NzofOr68mleA924EwCX:v4MQOC/gHozN7NzomW8TA9Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776285312, "uuid": "c4032f19-ee85-43de-b436-6c42a33872c5", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285312, "uuid": "2d5a511e-bae7-4771-87af-0e46fd61952a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a27e989-390a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776285312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285312, "uuid": "c2d6f6e4-7a49-4734-9eef-47d0333aede4", "comment": "Malware payload", "value": "e0fc906e1cab87a747ffebce8f2a506b", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285312, "uuid": "a9508e57-aaef-43e8-a67b-d11459d44105", "comment": "Malware payload", "value": "3b944aee6b96982f4b95c920467d0a2deda151bdc83a9e50800a33487ac509b3", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285312, "uuid": "25fdfa28-f2a2-48c5-9273-bdde29f0d976", "value": "T105C423B7179AB0897503E3E4814C6D94C9AF20D957C3436ECA1E2693F5BE247FB200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285312, "uuid": "8d0375b8-9a38-4041-9247-b7b2e55b468a", "value": "12288:FeElNtIBB2gX3U5wA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ezM:FeSIBBfHGm6Jj6ESfUxZ91kmY/9Hew", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776285312, "uuid": "2cefc9ce-2a1e-42ba-a78d-edf898f9ae21", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285312, "uuid": "e5cce6d4-13f1-44ec-a58a-3a51aae64fc6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9acce3bb-390a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776285313, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285313, "uuid": "1f61f73d-1758-4a07-89e0-f771eea9a6b3", "comment": "Malware payload", "value": "f7feef70520d3c424f9d1de5d43195a6", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285313, "uuid": "329af6cc-9761-4db9-834a-be4bcda15b77", "comment": "Malware payload", "value": "42227bd8e2352be7f335835fe459a9276b1a16a8f998e5ff122a4ece6f24d362", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285313, "uuid": "f4becf2c-e7ee-4866-ae4d-a41b11881141", "value": "T132553387817C14848F7D07677BFFD46C62248EFC200608261B6A189B693F79FC6B59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285313, "uuid": "594e1161-75d8-40ab-84b0-9ca6ca82f339", "value": "24576:aemeYTqfYxoZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRl:aeVwqwxoZ9bq+MmMEL+hcjXHC/wnwdl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776285313, "uuid": "2fdbad2d-8266-4c50-a66b-9e0e657db33a", "value": 1388883, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285313, "uuid": "2adcadb7-c669-4d7e-b013-8ad15be91476", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7000b9f7-3643-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776285665, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285665, "uuid": "ed34b54f-337e-47da-87ce-17c1994e3222", "comment": "Malware payload", "value": "c500f58c1abbd7e476af0ff65c8b9480", "object_relation": "md5", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285665, "uuid": "e5aac739-6c9d-4b06-ba48-8c2608993b75", "comment": "Malware payload", "value": "026603cdbbf78cda5c213649ab070c794f56e9555f8fc9d2bae84f4f51bc6cc8", "object_relation": "sha256", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285665, "uuid": "6358726c-ef63-4bde-bebf-b23c05cb2018", "value": "T112A833A8B64F3E5961E003766705CED1B919CAABD20647CCCE503FEAE4C59E72D901", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285665, "uuid": "97b9f5cf-d20a-46c4-a36b-f073724a74d9", "value": "6291456:Jtq/2gIIlmqgE6zmm9VBGTqtYx6iweAPosg7HH0:Jtm2amBE6zmmHNtYxbL0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776285665, "uuid": "8457dfdc-cac3-4a03-a09e-c91eda9e692f", "value": 207804047, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285665, "uuid": "e3fa7bf4-b39a-4e10-878d-6ad068065bec", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ac949ec-390b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776285742, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285742, "uuid": "0661c5b8-111b-4054-9276-5354adf47bc1", "comment": "Malware payload (Mirai)", "value": "2cc1f088784e4905978d75d2b414d610", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285742, "uuid": "9e7adb26-7318-4678-8642-62b39b1d341c", "comment": "Malware payload (Mirai)", "value": "44a279424ece8eee271221867c4fedbbaa39586cdd6dff0a593d4d57048db1f3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285742, "uuid": "db65edb8-4bd7-4600-925a-c92acb9f303d", "value": "T19242B50B57BABE07C1E0F37701E3072266EA9F556118432F7D192C995E993072D3A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285742, "uuid": "9b1fb0a4-1722-44ba-a9da-6d359570d761", "value": "192:ngGr1/Wzx6j+LnKuOgR8HF20E5ID8tRGrSv3RczekT:ngHxI+7DOgSlnEKSv3R0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776285742, "uuid": "38a50b30-585b-4e53-a634-de91d59ddc2f", "value": 12308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285742, "uuid": "e93f83fe-edc3-4425-9305-3bf3399a2a47", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3210e7b-390f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776287501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776287501, "uuid": "580cfac5-ff8b-4bc8-b2f0-316ab5ac0636", "comment": "Malware payload (Mirai)", "value": "1ec56c8b529117baf0123fa40f31abcc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776287501, "uuid": "be01ac6e-8238-4482-99e6-851fc820d2e6", "comment": "Malware payload (Mirai)", "value": "d5c1325a239a977e3c58c7921df627664da7c03b5780fdafb2832bf5c5fa5694", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776287501, "uuid": "9df38e96-c298-4fd8-9e07-9ee984fe1786", "value": "T147A3F749FD416B11D9DA35FAFE4F024973934B6CE3FE7201AA245B2123CAA6B0F365", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776287501, "uuid": "c249178e-0b13-44fe-b4dd-c488b5efbba5", "value": "3072:CGbanKkhUcW/orAS3hYaz3hQvqtakCIBIg05H:D+1hfCorfRYaz3hQvfGIX5H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776287501, "uuid": "6abb9b4b-2227-4daf-b3b0-b5682766ca38", "value": 104036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776287501, "uuid": "419555c6-054e-4a51-ab26-9a2902f764f9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "989b7e49-3911-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776288316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "9457bff8-6e10-4aef-8e2c-3cc3abe28729", "comment": "Malware payload (Mirai)", "value": "eb228215f89f19ec95baffb7f2aac664", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "827032d2-d9d7-4019-99f0-94e7bbc463d9", "comment": "Malware payload (Mirai)", "value": "18b6f291240a98103a3a4dd12ae63202b3d009fab5d5f49fb90deac0b495c77b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "1a361a3d-5bda-4a0e-85b0-19d49687edd2", "value": "T13A835BC49213DCF2ED084235217BF3336536E9B90078FEE3FB5556B29415AA4B28B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "7efa8aba-b583-4ec3-8c74-3809e1c4bb0d", "value": "1536:ZrS+mh9rsJ9EVmbN8Fajugn34vi2d/UgXhA06t6XB6h9fHLw4p40F1kYhdSWyQR:Ze+GlYqsbNUFdvXsgXe06t6XBcfHL9Vx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776288316, "uuid": "e688bde5-6f71-489b-bbc7-a83fc537d21b", "value": 88304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "6d62fba8-3141-4c56-91f2-10854c690d57", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "989cee13-3911-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776288316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "76945c4f-f68b-4671-9617-8b84b7f6c8f4", "comment": "Malware payload (Mirai)", "value": "91187440545b7d691115ac98089b6dc3", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "2f4ca66f-dcba-4482-8dd0-8710c419342d", "comment": "Malware payload (Mirai)", "value": "f625fb09f4e2b0f0293eaf262a7e9d19ef2973792249c8eec139876c73ac212f", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "06373722-d54b-4fc6-bb25-589b5e5b1f14", "value": "T15EC31A8ABC418F11D5D666BAFE0F618D33134B78E3FA7103CE149F29678A85B0A3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "ad643837-138b-45b1-84e1-d98d9b2a854c", "value": "3072:qSaMRO5/CCHEq1fD2iSssFNbEKfXtXDJnxE3tC9fmLP3NlE+u3n4w:EC2V2iSssFNbjXhJxE3tC9MP3Ny+0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776288316, "uuid": "e540f715-44b7-449b-8b00-4447415083a7", "value": 120356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "869ebb38-846b-4290-aef8-957966fb74a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "989f4ea9-3911-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776288316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "ba7e2cab-5879-468d-83ed-baa54a3d2524", "comment": "Malware payload (Mirai)", "value": "c1589c7e454d1a3b73e722d7c3e8ed70", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "434d6df9-035e-485b-a193-fc1cf62221de", "comment": "Malware payload (Mirai)", "value": "54dd4bf12c8fb35b09df06f3de33ab8dfff5e5cb682d1f38baf532f5716396ed", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "867c6a43-b5a4-481b-98e0-6fa979d8bea7", "value": "T1B3A33B92B400DC7EF86BE6B381270B15F121A3E10F516F27B61BFD63DE2A1A45C1AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "0f0fb5a7-e5e4-47f0-9d3e-911d41fe100b", "value": "3072:pWwhxWR7jFBCbYuAp68000PP0kcVyZkU+MUNRxXR:pBcRvvCKMkULYxh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776288316, "uuid": "4c7d34a2-2023-4bf2-811f-043f82370132", "value": 101436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "ca4e3e07-9220-4fde-9b7e-f38922397efb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98a4dcf1-3911-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776288316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "d69842dc-2a7d-43e3-a443-1bb39aaa7501", "comment": "Malware payload (Mirai)", "value": "8b1fcd28e1f19ae9d419a31a74ac7264", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "bd44309f-a573-400e-aa4b-ee2fed875fbd", "comment": "Malware payload (Mirai)", "value": "a54e6668cd82259813246bdab7b9b028eb670c016d991f361caff7aaf98b0e38", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "9aa68bca-85d0-4fd3-a4f0-62c871fd3b84", "value": "T1B8D3070ABF711EFBE46FCD3345BA4B49289C450621B93F363674D81CB25A68F1AD38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "2357150d-4538-41bd-9433-b0124c3f1edb", "value": "1536:1AzIjmutuMgen5/yGob1p6i3if0kBq5YCp+bJs81mMHd+Ljd7NfZfqFX39wu7r8L:1Uym1pFdNMsgnyJ/09uF9mAmn4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776288316, "uuid": "8d19f6ed-7689-4c86-ac8a-ffc7badf2d09", "value": 130140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "ee380b99-6ac5-49f4-a42a-10701e0eb626", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98a57a02-3911-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776288316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "d67d7d75-2acd-4e8c-880f-a0c732719030", "comment": "Malware payload (Mirai)", "value": "85308b19f4c49acf29f3a911fe3f7223", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "c04cdb4a-cfd4-48b8-b165-a843d10266d0", "comment": "Malware payload (Mirai)", "value": "558174cf658e20e4a889a6d64667d9db05e1bfecefa9890f0ff6677032fa3c49", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "e1a04da8-2cf8-44a8-8089-9a912e31ce2b", "value": "T1B9B34A22FD756C2BC5C0653B51D34630F5B6439926B89A4F7E631D9CEF14220312FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "3d128e19-690e-4a34-bc89-53bd03e8673d", "value": "1536:gWq56BB4aOScoe0eEbGkYxBD0PK02xG3giNWs6Wolm4H7Meh+o:nqoEh8e0GxWIGNtt8H7/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776288316, "uuid": "107a05c2-7db7-4eb4-9a7e-5c05936b37bc", "value": 107928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "a73279e6-2c09-46a0-a751-e727cc851518", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98ab7fd8-3911-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776288316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "b300a1a6-2637-4ea8-a72c-a0d828b1f596", "comment": "Malware payload (Mirai)", "value": "e1182930f2dc04d6a4e7b14097da58ba", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "72bb6695-49ba-415c-a93f-0764d3c5c803", "comment": "Malware payload (Mirai)", "value": "53bae1d7791fa29270ff00f59b3a32b2f676c699f1ebd77d7f681cabe87d3232", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "d9bb7ea1-81a4-4608-8cff-4d40fa0f336b", "value": "T1EAA31B8ABCC5C702C5E0A1B6FB1F52CD375643A8D3EA7147CD19AF29274B8670A3B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "2ddbb551-c187-4e1e-97d2-67974faf66fa", "value": "1536:ZClDzZAd8XYrSDAWP4M1C7cYiBD98Pk8HkQnpZV8fU0OJIbAn4b+R:ZClDzZAIhDe2C7cYiBD98SCVXlWAn4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776288316, "uuid": "8d65a0c9-669c-4f95-9e0c-fa9448d50c4a", "value": 100328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "26b0e163-6c5b-413b-bc26-7dbdb91498d1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98acfb0f-3911-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776288316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "39789042-e8a8-4341-ab6d-68b69ec3b684", "comment": "Malware payload", "value": "752753133c56ecaf27339242cce1b37e", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "32eb4792-fcb4-4731-8357-642e8167d2af", "comment": "Malware payload", "value": "53481078d0091b99c1102b01149e3034c190995ebea21fc26f8899c7fcd2452d", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "0e64099e-d3eb-4217-b7b8-322fc8ec7ef3", "value": "T13B41205E01493C84C04CD43A3397861EB0A85BDA18AF4B97AEE405BD90F8CCE7935E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "a5d82a31-bb58-4ccd-b10a-c6f72c3749b1", "value": "48:mDf7DIH7Dr7DW7D57DO7DJ7Di7De7Dh7DzGDfGDIHGDrGDWGD5GDOGDJGDiGDeG0:mDf7D47Dr7DW7D57DO7DJ7Di7De7Dh7/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776288316, "uuid": "d7eee958-932d-470f-8a78-9bcdd7bd205e", "value": 2106, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "4c79f70d-45f5-4400-b78c-7262ef3e2a23", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98ad2b12-3911-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776288316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "e2723f4f-5a38-4887-93c6-066aa3291aa6", "comment": "Malware payload (Mirai)", "value": "d28513c57588d0262bc039e77245d70f", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "d5137c78-7b51-492e-900b-95b91cc4b4bc", "comment": "Malware payload (Mirai)", "value": "889648ff2939921071925b0b2da652784e939fd3b42e6c775e2fe7644a83cec7", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "4cdd1181-d64a-47a4-a827-4b6a7a486fb9", "value": "T1ABA32A8ABC85C712C5E1A1F6FB1E51CD371643B8D3EA7147CD18AF29274B86B0A3B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "01c1f52b-833a-48dc-93c6-b0ec72bfc86a", "value": "1536:LgfDmCmJdmkClJIaa4LcJeixckhR4xkbJQ5V689U8MDa0vUn4b+R:LgfDvgskYJ5oJxxckhR4yJW6UUGSUn4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776288316, "uuid": "830fa1bb-c3c4-43dd-a12a-70a770c4704c", "value": 103820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "7e71f09f-cc50-48c8-b04d-53499c6ccd32", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98b0dba2-3911-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776288316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "a72e1c03-5589-48d6-ab23-a7390d5f5801", "comment": "Malware payload (Mirai)", "value": "429c6ae77946ff983b3a31389089b37d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "47ffae18-4ceb-4b15-bcf1-86cd9133110b", "comment": "Malware payload (Mirai)", "value": "bdf829d6547f18c50fd48ad9a5f8776632c30107da4a0143d77248538466535b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "69cc2ade-292f-4fc8-986a-04ffc47e5cdb", "value": "T176A3390273594147F3A74DB11C3F6BF197AFD5A122A0A286694EEB0F8135E322586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "5db504fe-3a44-4eff-ae42-d3e8080c23dc", "value": "1536:jq+m/HoO03WIbb0QkrLYIHiv2IuHRHvU7nafEHkTDOXqZfJ0xQ8PDHBD2RnL8+Rr:WqO0mIEBHRHvoapNJ0uITCnLP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776288316, "uuid": "013d9bcb-982f-46fd-89f7-968086482d5b", "value": 101364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "b9bd3a6b-7c17-4eb8-a9df-1a786c41c537", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98b78741-3911-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776288316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "8d8369cc-1b2b-4aa9-995d-51d65dee1a18", "comment": "Malware payload (Mirai)", "value": "d2ffb0b432df7bd318a4ec30a50a0ad7", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "3317e46e-a3fd-4787-b089-c758b4bbde35", "comment": "Malware payload (Mirai)", "value": "8af3bba4ba06cf7fde6e50a4a1312f3acc9975e5c6b078cad8a98c8fc8915e36", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "9c235a3a-6372-4421-98ba-0fcaddfdda4f", "value": "T1A9B32C86BC81CB11D5C656BAFE0E61CD33134B78E3EE7213CE185B2D674A86B0A3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "f442a07f-07e0-4b96-82a9-2185d3c526dc", "value": "3072:m63++Z5HzFxEYaflS4iDPhzIRzWo3aJf2MR/uE/Yfcn4:DzFISxDPhzIRp302M1u+Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776288316, "uuid": "889c3bb3-ce15-4faf-8802-93050f5b9026", "value": 107900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "11b93e82-f8b3-484d-bf19-5949fd7ab6ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98b932ca-3911-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776288316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "1f97a8c0-66c1-4b8e-a9cc-32c3e3d98083", "comment": "Malware payload (Mirai)", "value": "96cf9e5db325977a182f2cabb733ca21", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "0e0e83fc-8490-4ee3-86f9-a9b392d17ef3", "comment": "Malware payload (Mirai)", "value": "173af8c8680cdf956849932df46300f3aee391bcc5aca2610fbb4e909f7a71e6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "d92d6e31-aa74-4a63-8c1c-e5118eb9faf9", "value": "T151938D02CDB4ACA8F07AAD7110B5DDBA4727F505A91BACFB3C46C2511047B94F5AAB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "d6bfe1e8-e3db-4ef0-a34d-b6f61e4dd1e0", "value": "1536:DXB45JRnEw+NFeu6vc333ggNfNm6c9+qdwh9Y743v2CTtA/P1nCb+R:DXBeJ/+NFeXv03ggRN3GFU3v2YtU9nC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776288316, "uuid": "c5fe8be3-7191-4832-99c8-285bae8b7127", "value": 93628, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "7c381cb2-d23f-45d3-b7a9-d3bede7e85ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98b93978-3911-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776288316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "31daffb7-3161-4b25-a773-e3ab9375f050", "comment": "Malware payload (Mirai)", "value": "02e94e35ec2312ef44e3ccca3f68731e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "a6ea2397-0e54-4cd6-9165-739dd03b92bd", "comment": "Malware payload (Mirai)", "value": "cb8d90fad2651742d19e49bf137ac8f08b2b27a86bd21423b9581a9029a3200e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "71a08c2e-0b27-4418-939f-23d5bc1b6b8b", "value": "T152C3D80F6E62DF7DF32C82358BB78B36A659239533E0C585E26CE9415D6024D182FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "e72bed0a-cb71-4c4b-8e13-56fb63d94db0", "value": "1536:e9lPZQROayOawzaNNNNeRCIZ0OtKLSBxYV7O3uyqhZsnL8+R+b:evZ1NsCg1BOVzZsnLS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776288316, "uuid": "d3f46307-1339-4af5-9620-315160f854fd", "value": 126044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288316, "uuid": "fe5d4943-5690-4b7c-824e-85348439b713", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1afed41e-3913-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776288964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288964, "uuid": "518f42a0-449f-4b0d-a5d2-73cff13d720c", "comment": "Malware payload (Mirai)", "value": "82812c481b75447f8ca2f08b2f8fb340", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288964, "uuid": "2b740134-228c-420e-bf76-311df68f8983", "comment": "Malware payload (Mirai)", "value": "4491429a853c50b57124a27fbbcda88d3075cfae1df65e2c618f42d45fadb5f4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288964, "uuid": "e81724ad-4cb6-4d49-9f05-17927f5c5924", "value": "T1FBD31A46F8819B11D5C151BAFF0E124E77231B7CE2DE7202AD246B747B8B8BB0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288964, "uuid": "ea85c019-e708-4048-be4d-8e776d271d2c", "value": "3072:2qwDysUhE2gVt1RaMEVmJXFbAJffXdqMLGED:rCByUVtPalVm7AJXkMLGED", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776288964, "uuid": "cac67d77-71d2-4e2d-ab8e-026823634196", "value": 136604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288964, "uuid": "7b6e2e6e-0c6d-446a-8f92-00d2ff144bef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ac4408c-3916-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776290467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776290467, "uuid": "d127460a-a2c4-45ad-b758-e61aecb5cf3a", "comment": "Malware payload", "value": "8058015d5cdcdda54234b795f4b35ea3", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776290467, "uuid": "1ae7aaa1-07cc-451a-a457-b7e0db9cc9b7", "comment": "Malware payload", "value": "40abaaa703c18a6956433fabe0dde684bb5f9eee2cc1842a88adbcb0f51cdae4", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776290467, "uuid": "7bd76076-0c84-422f-8818-3002487a1822", "value": "T151C42367226F72500DFE92ED4E4156146D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776290467, "uuid": "5300b2a9-4555-4d17-9c18-3a30eaf9ed09", "value": "12288:AeCEhtU9qO3g/ALyYG0ZaDajTCXMO8xzDOeQak8:Ht+A/f0Za6TCXKBxlD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776290467, "uuid": "136f94f8-23fd-4320-b0dd-38278ff7119e", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776290467, "uuid": "bce3baed-d263-4e7e-8258-7f84bf6325e3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9afcb655-3916-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776290467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776290467, "uuid": "8d88b48e-4c8a-4c37-bb4c-c113b4a57635", "comment": "Malware payload", "value": "b5c877dd5fcf111498c970a1d22ce0fa", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776290467, "uuid": "e46265c4-2c6a-4dd7-82bb-d1964a247d47", "comment": "Malware payload", "value": "a424f4b46a9e9ff0fb0e8610c98e7ba608275756362976b722e76370e61d1c0f", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776290467, "uuid": "6579dfde-7f65-466b-bd5e-df8eda8baa4a", "value": "T11DC42367226F72500DFE92ED4E4156146D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776290467, "uuid": "6051bf96-43a0-44e7-b9ce-9eb575d622fe", "value": "12288:aeCEhtt9qO3g/ALyYG0ZaDajTCXMO8xzDOeQakn:ttrA/f0Za6TCXKBxlY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776290467, "uuid": "e85c0953-bd34-4a3d-8e06-0f15cefd3b98", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776290467, "uuid": "9c3f4495-cdb2-4b75-8619-8866e7a22a27", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c12cf1d-3916-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776290469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776290469, "uuid": "1f88ae41-4123-4753-86ea-4cd367a3aedf", "comment": "Malware payload", "value": "ead25360fd8bba473eeae46587843c3c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776290469, "uuid": "02a8c9b3-f1a7-4b41-a9d2-7de999a720dc", "comment": "Malware payload", "value": "bb98112a604f79ea25cda3f51e5fabc79457edcd6ffb01dc2574a35b7aa809e4", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776290469, "uuid": "eef15c69-2cc0-4dd4-80cb-f43212752abe", "value": "T17CC42367226F72500DFE92ED4E4156146D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776290469, "uuid": "56c2d4f4-124f-435f-9589-3493d0aa3757", "value": "12288:yeCEhtJ9qO3g/ALyYG0ZaDajTCXMO8xzDOeQakj:Vt3A/f0Za6TCXKBxlk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776290469, "uuid": "4a210c71-92e8-4ad7-adbb-65a89b487002", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776290469, "uuid": "a0341cd7-1f99-42bb-bb12-b74e10847834", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d30209a-3916-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776290471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776290471, "uuid": "4230c03e-9dc6-4905-b31c-dbb392dafe52", "comment": "Malware payload", "value": "8331b02f7d606bacab9dae49c5c16272", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776290471, "uuid": "22c912ee-657c-4c3a-9c83-0523bd3ee13a", "comment": "Malware payload", "value": "5c01610b271eabd1de8b8b4eb211041f69ecf4fab1e8a431ae9db9d9bb524905", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776290471, "uuid": "da16987a-41b6-42e9-b214-cd5bbb37c4b8", "value": "T130C42367226F72500DFE92ED4E4156146D3D8E322A00A6FE65D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776290471, "uuid": "4c86ee4d-9523-4b75-b86b-ebbed210ed4f", "value": "12288:6eCEhtd9qO3g/ALyYG0ZaDajTCXMO8xzDOeQakX:NtbA/f0Za6TCXKBxlI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776290471, "uuid": "f1b25c3b-3f1c-4aac-acca-6f96f66f7cf9", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776290471, "uuid": "6eb0457f-f816-4b22-9358-c8bb9bf53dff", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a7fad89-391e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776293715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776293715, "uuid": "6b0a7445-1ac6-4838-bb1c-f7f8074c4818", "comment": "Malware payload (Mirai)", "value": "429e16051ba60674b99579f626a9de3b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776293715, "uuid": "24060400-59f6-4555-917a-2111e0c3407e", "comment": "Malware payload (Mirai)", "value": "a569b753c6a424e1051c67e4cf1b222b847d3c4930f89dabcb66f8fe971ba92d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776293715, "uuid": "72d2e188-f21c-47f0-8cac-32ff3cfcaceb", "value": "T15BF34BA9BA0F6C41F1C2C3F8DA8C87E13E1735E3C67A8D71790252EDDBA39D959905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776293715, "uuid": "0474f87d-071f-4427-8543-8b8be40f6b48", "value": "1536:znD7shwPTvDNfQSgAHAw6sx196muRu5qKb1q7EMDzb4rWy5HZMTUEn5p5M/LW:zHOgf7vtx19Su5/Q7DDzUrWyZZMTUxq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776293715, "uuid": "6e1d4e6e-f544-4575-bc72-95c59ee359e2", "value": 165736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776293715, "uuid": "89ba4601-ca56-46c3-ada8-61c3dfffb73e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "353fcf92-3924-11f1-bc00-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1776296310, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776296310, "uuid": "6246a964-c76c-4e07-b5b2-91400f1887da", "comment": "Malware payload (Stealc)", "value": "b1ed5ba271ab4cbb5a0c5121dfce2405", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776296310, "uuid": "0db8b636-a55a-4172-8a66-e1f3eaa32913", "comment": "Malware payload (Stealc)", "value": "0215f734867bd71c57ff5c524d8cc670be5b4f1861b2c390cf46d18784a53624", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776296310, "uuid": "328d09fa-925d-4d0e-8f7e-c6fc3367c5ac", "value": "T17FF48D1EF7A612F8D0B7C274CA428952E77278465370978F03E15AAA5F372905F3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776296310, "uuid": "7d0192c3-c720-44c8-a6d9-48fc586db4f4", "value": "c5a49d74dbeba2b4cb56b327e236efe3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776296310, "uuid": "bb09ba3a-afe9-441d-80f6-7f291bf13fb4", "value": "12288:TrHqQr5XgvVozsROaYzPIP17vMKrNhYyxBlDetAqxSv:nPgvVqsI0d70eXYyb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776296310, "uuid": "bf955f95-38c7-439f-905e-4bd777f85257", "value": 785920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776296310, "uuid": "47bba619-aac5-4861-a0ca-a7c0e4a86bff", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776211269, "uuid": "34f9a161-385e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://frame3-work.prime-sector-unit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776211336, "uuid": "5d52d5cb-385e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.183.105:45907/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776211810, "uuid": "777307c8-385f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://layer4-show.prime-sector-unit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776212047, "uuid": "04db07da-3860-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://piece5-load.prime-sector-unit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776212229, "uuid": "7167b0a8-3860-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://front6-gate.prime-sector-unit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776212530, "uuid": "24ad265e-3861-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://news1-wire.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776212539, "uuid": "2a0045d5-3861-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.203.169.15:59482/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776213082, "uuid": "6df1d812-3862-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.118.42:59890/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776213126, "uuid": "881f3af0-3862-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://event2-log.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776213188, "uuid": "acb821c7-3862-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.168.196:55366/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776213369, "uuid": "18b08c1f-3863-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://topic3-base.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776213375, "uuid": "1cad287d-3863-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.245.195.38:52709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776213493, "uuid": "63043fb7-3863-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.86.214:42488/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776213608, "uuid": "a7523e34-3863-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://table4-data.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776213908, "uuid": "5a669baa-3864-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sheet5-view.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776213966, "uuid": "7c965011-3864-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.86.214:42488/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776214030, "uuid": "a2f63995-3864-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.203.169.15:59482/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776214209, "uuid": "0d56c3ee-3865-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cover6-link.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776214570, "uuid": "e4edfc98-3865-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://task1-core.active-phase-net.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776214929, "uuid": "ba8314c1-3866-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://step2-flow.active-phase-net.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776214990, "uuid": "df10ab11-3866-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.118.42:59890/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776215286, "uuid": "8f759f92-3867-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://plan3-item.active-phase-net.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776215592, "uuid": "45f97ad7-3868-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://term4-text.active-phase-net.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776215888, "uuid": "f66bc724-3868-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://goal5-list.active-phase-net.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776216014, "uuid": "4174ed63-3869-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.235.42:47732/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776216132, "uuid": "87b78b30-3869-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.235.42:47732/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776216248, "uuid": "ccdc504d-3869-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://work6-host.active-phase-net.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776216255, "uuid": "d0d86305-3869-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.218.64:56531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776216373, "uuid": "177d2369-386a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.243.240:47765/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776216435, "uuid": "3c6f4ad0-386a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.30.56:38233/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776216495, "uuid": "602d47cd-386a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.84.143:50168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776216547, "uuid": "7ed2983b-386a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://city1-spot.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776216973, "uuid": "7cf36d5c-386b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://area2-find.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776217268, "uuid": "2d0137b4-386c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zone3-view.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776217573, "uuid": "e2e84af7-386c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://site4-info.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776217696, "uuid": "2bb04a03-386d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.218.64:56531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776217865, "uuid": "90c9d686-386d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.141.151:57623/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776217992, "uuid": "dc646091-386d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.175.32:46120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776218231, "uuid": "6b095c52-386e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mark5-logo.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776218408, "uuid": "d46125f5-386e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base6-door.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776218588, "uuid": "3f596fa4-386f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://link1-wire.brief-point-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776218592, "uuid": "4213c53a-386f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.54.58:38302/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776218766, "uuid": "a9f09f73-386f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.201.173:54017/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776218834, "uuid": "d2305907-386f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.232.3:36413/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776219010, "uuid": "3b184d71-3870-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://card2-fast.brief-point-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776219131, "uuid": "83776985-3870-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.226.53:49648/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776219309, "uuid": "ed194e7a-3870-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://note3-base.brief-point-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776219606, "uuid": "9e281b49-3871-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7556497175/QKLiJhU.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776219666, "uuid": "c1f81d47-3871-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sign4-icon.brief-point-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776219735, "uuid": "eb2669a6-3871-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.232.239:37505/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776220027, "uuid": "992ee000-3872-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail5-send.brief-point-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776220029, "uuid": "9a58fa40-3872-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.54.58:38302/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776220216, "uuid": "0a11c24e-3873-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.253.80.93:48921/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776220269, "uuid": "29ccd9ec-3873-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.232.239:37505/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776220329, "uuid": "4d272032-3873-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://call6-root.brief-point-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776220687, "uuid": "22f62105-3874-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trip1-road.speed-route-track.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776220987, "uuid": "d5483636-3874-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ship2-move.speed-route-track.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776221226, "uuid": "6424676b-3875-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.110.17.152:44361/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776221347, "uuid": "ac5919f8-3875-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://park3-area.speed-route-track.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776221474, "uuid": "f7b55a2c-3875-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.63.140.218:51956/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776221645, "uuid": "5e0070c7-3876-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://load4-byte.speed-route-track.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776222011, "uuid": "379e52a2-3877-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pack5-unit.speed-route-track.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776222251, "uuid": "c6b4f142-3877-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.253.80.93:48921/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776222312, "uuid": "eb71ee0d-3877-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://drop6-main.speed-route-track.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776222666, "uuid": "be322194-3878-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flow1-open.clear-stream-web.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776222685, "uuid": "c9d0f75d-3878-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.149.172:56691/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776222731, "uuid": "e54e8890-3878-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/x2gv5tlkca", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776223030, "uuid": "970691d7-3879-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://view2-data.clear-stream-web.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776223037, "uuid": "9b981897-3879-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.236.167:60113/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776223155, "uuid": "e17749b2-3879-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.201.173:54017/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776223275, "uuid": "2986cc30-387a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.63.140.218:51956/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776223276, "uuid": "29b46bba-387a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.3.70.107:49607/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776223327, "uuid": "48782309-387a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sort3-item.clear-stream-web.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776223686, "uuid": "1e87d22d-387b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://file4-path.clear-stream-web.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776224051, "uuid": "f8182d81-387b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://push5-sync.clear-stream-web.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776224295, "uuid": "89411bec-387c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.236.167:60113/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776224350, "uuid": "aa4495f6-387c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6-link.clear-stream-web.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776224465, "uuid": "eec08575-387c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.54.95.49:51162/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776224654, "uuid": "5f23ed0d-387d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.149.172:56691/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776224708, "uuid": "7f5180f0-387d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shop1.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225071, "uuid": "58071a28-387e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://guest2.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225129, "uuid": "7a984f70-387e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.250.221:53608/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225249, "uuid": "c21e7569-387e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.248.33.200:42318/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225370, "uuid": "09f23ea4-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://media3.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225375, "uuid": "0cda0b69-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/Sassy.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225375, "uuid": "0ce59d16-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/Sassy.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225375, "uuid": "0ce5a99a-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/Sassy.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225375, "uuid": "0d22a4a6-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/Sassy.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225375, "uuid": "0d2cd576-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/Sassy.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225376, "uuid": "0d82546e-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/.Sassy.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225376, "uuid": "0d82698c-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/.Sassy.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225376, "uuid": "0d8c1dbf-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/.Sassy.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225376, "uuid": "0d8d2f8d-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/.Sassy.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225376, "uuid": "0dc81911-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy.aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225376, "uuid": "0dc913bb-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/Sassy.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225376, "uuid": "0dd2435b-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/Sassy.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225376, "uuid": "0dd2b33a-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/Sassy.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225376, "uuid": "0dd4f081-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/.Sassy.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225376, "uuid": "0dd649df-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/.Sassy.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225377, "uuid": "0e660ecf-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/Sassy.aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225377, "uuid": "0e662721-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/Sassy.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225377, "uuid": "0e703276-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/Sassy.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225378, "uuid": "0e8d7df0-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/.Sassy.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225378, "uuid": "0ee3f42b-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/.Sassy.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225378, "uuid": "0eece7b7-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/.Sassy.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225379, "uuid": "0f990ec1-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/.Sassy.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225379, "uuid": "0fa9a333-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/Sassy.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225380, "uuid": "1023c204-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/.Sassy.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225382, "uuid": "115f159a-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/.Sassy.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225386, "uuid": "134370f6-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/Sassy.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225386, "uuid": "13437dde-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/Sassy.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225386, "uuid": "13c4610d-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/.Sassy.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225496, "uuid": "5520721d-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/Sassy-Cats.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225610, "uuid": "994a5888-387f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.101.46.29/.Sassy/.Sassy.aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776225967, "uuid": "6e191058-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://item4.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226035, "uuid": "962aef46-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.139.35.87:49199/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226090, "uuid": "b6df0bc2-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.134.250:55499/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226090, "uuid": "b719958a-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.10.44.142:64613/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226090, "uuid": "b72d90b1-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.170.136.155:54968/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226091, "uuid": "b782d01b-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.120.39:54836/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226091, "uuid": "b785937d-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.65.217:39176/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226091, "uuid": "b785a220-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.83:52355/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226091, "uuid": "b78656a0-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.249.194.99:58270/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226091, "uuid": "b7872262-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.26.173:45402/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226091, "uuid": "b789fc85-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.78.200:41934/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226091, "uuid": "b7971245-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.52.255.21:54061/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226091, "uuid": "b797912e-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.121.11:48099/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226091, "uuid": "b7a5a489-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.177.33.169:59174/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226091, "uuid": "b7b9f691-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.240.132:41606/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226091, "uuid": "b7c87a0f-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.134.146:36487/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226091, "uuid": "b7cc8a82-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.209.249:54465/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226091, "uuid": "b7ce90d3-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.41.189:49085/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226091, "uuid": "b7d0720a-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.48.166.162:54022/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226091, "uuid": "b7d0fd57-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.138.135.65:60830/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226091, "uuid": "b7d93bc7-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.233.232.44:60693/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226091, "uuid": "b7dbd53d-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.241.79:40570/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226091, "uuid": "b7f5f928-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.128.182:53186/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226091, "uuid": "b7ff26dc-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.69.92.51:37658/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226091, "uuid": "b8007682-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.11.150:45003/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226091, "uuid": "b8081d5a-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.151.75:34148/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226091, "uuid": "b80a9855-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.86.10:57739/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226092, "uuid": "b80d7152-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.175.25:45537/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226092, "uuid": "b8141472-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.128.196:34465/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226092, "uuid": "b81463a4-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.57.41:51491/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226092, "uuid": "b81e9ce0-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.184.224:45987/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226092, "uuid": "b81ff7e7-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.184.224:45987/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226092, "uuid": "b824b8ae-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.151.75:34148/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226092, "uuid": "b82c0d69-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.189.104:34917/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226099, "uuid": "bc988480-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.176.250.75:58181/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226108, "uuid": "c1dcf76a-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.135.153:35729/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226119, "uuid": "c871139c-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.254.8.106:47404/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226146, "uuid": "d883b0bb-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.187.101.68:55242/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226149, "uuid": "da7e390f-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.61.70:45049/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226150, "uuid": "dabc3a9d-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.41.189:49085/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226150, "uuid": "dac308db-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.204.71:34994/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226150, "uuid": "dad2ac8a-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.32.195:34932/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226150, "uuid": "dad320f0-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.95.127:60780/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226150, "uuid": "dad424db-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.130.121.88:46941/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226150, "uuid": "dada40fa-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.214.149.164:39548/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226150, "uuid": "dadb5fba-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.243.240:47765/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226150, "uuid": "dadcd4ce-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.120.39:54836/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226150, "uuid": "daf3164e-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.221.47:40876/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226150, "uuid": "db0b5226-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.54.29.225:37047/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226150, "uuid": "db1583c5-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.173.90.30:52537/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226150, "uuid": "db1be902-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.213.219.78:43957/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226151, "uuid": "db52148e-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.10.205:56570/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226151, "uuid": "db530734-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.133.165:60833/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226151, "uuid": "db6dbf21-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.221.47:40876/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226151, "uuid": "db72c576-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.32.159:45654/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226151, "uuid": "db8513dc-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.174.246.101:39962/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226151, "uuid": "dbbb97bb-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://help5.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226155, "uuid": "ddc18a74-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://153.37.227.89:42330/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226161, "uuid": "e1840b0b-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.140.19:58527/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226206, "uuid": "fc1ade7a-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.225.163.226:39631/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226207, "uuid": "fd2141fc-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.86.10:57739/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226208, "uuid": "fd4d6806-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.130.24.183:50835/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226208, "uuid": "fd9d414a-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.89.2:55241/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226208, "uuid": "fdc46d46-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.138.135.65:60830/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226208, "uuid": "fdc4a73f-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.29.181:43425/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226208, "uuid": "fdc4ca7d-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.155.243:49935/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226208, "uuid": "fdc53b86-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.64.20:43097/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226209, "uuid": "fdcd8eca-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.175.25:45537/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226209, "uuid": "fdd5528e-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.209.249:54465/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226209, "uuid": "fddd20f5-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.108.229:34610/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226209, "uuid": "fdddaabf-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.0.79:44241/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226209, "uuid": "fde5021e-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.193.143:44022/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226209, "uuid": "fe0ee5e3-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.84.28.131:39962/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226209, "uuid": "fe16a26e-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.89.254.194:50243/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226209, "uuid": "fe3d9642-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.31.111:41312/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226209, "uuid": "fe3da598-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.127.126:35855/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226210, "uuid": "fe8db3fb-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.219.201:54137/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226210, "uuid": "fe8df7ec-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.6.62:58047/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226210, "uuid": "fe98abdc-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.237.189:32862/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226212, "uuid": "ffd92963-3880-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.219.62:32919/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226273, "uuid": "24703fed-3881-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.31.111:41312/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226393, "uuid": "6c01d069-3881-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main6.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226446, "uuid": "8ba1f507-3881-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.25:44290/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226447, "uuid": "8bab2ddd-3881-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.25:44290/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226633, "uuid": "fafa9ced-3881-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.9.150:35060/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226697, "uuid": "212b5676-3882-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://order1.fast-delivery.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226755, "uuid": "43a5470b-3882-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.9.150:35060/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776226756, "uuid": "440b66a5-3882-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.248.33.200:42318/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776227053, "uuid": "f4e862ea-3882-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://box2.fast-delivery.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776227055, "uuid": "f69bdc25-3882-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.250.221:53608/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776227472, "uuid": "ef13115d-3883-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://post3.fast-delivery.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776227595, "uuid": "3838ccc1-3884-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.135.153:35729/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776227771, "uuid": "a10d4de9-3884-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://total4.fast-delivery.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776227832, "uuid": "c57d7355-3884-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.185.79:44068/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776228132, "uuid": "786caec8-3885-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://city5.fast-delivery.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776228368, "uuid": "04cf9511-3886-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.69.72:59775/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776228372, "uuid": "079e7289-3886-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://site6.fast-delivery.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776228788, "uuid": "ff3d1b3c-3886-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://area1.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776228794, "uuid": "02abdaad-3887-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.254.132:47366/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776229034, "uuid": "91d3ea32-3887-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://spot2.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776229096, "uuid": "b705b82a-3887-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.90.217:41945/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776229328, "uuid": "40e0672d-3888-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.23.184:58755/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776229446, "uuid": "8791c0ec-3888-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.36.176:53534/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776229570, "uuid": "d195cd6a-3888-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blog3.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776229634, "uuid": "f7b6f283-3888-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.154.202:39308/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776229634, "uuid": "f7c7901d-3888-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.19.106:40715/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776229688, "uuid": "177dbb7d-3889-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://map4.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776230115, "uuid": "160ec016-388a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://news5.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776230347, "uuid": "a0bdbd25-388a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.69.72:59775/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776230468, "uuid": "e89e0dad-388a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open6.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776230587, "uuid": "2f733dff-388b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.234:43281/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776230713, "uuid": "7aeec4cc-388b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://good1.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776230717, "uuid": "7d4eb2de-388b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.234:43281/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776231072, "uuid": "50eebe41-388c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best2.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776231253, "uuid": "bcacd84c-388c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.154.202:39308/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776231256, "uuid": "be6db384-388c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.19.106:40715/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776231370, "uuid": "0238940b-388d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://top3.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776231792, "uuid": "fe1b3e92-388d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://list4.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776232147, "uuid": "d155f6c3-388e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://user5.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776232276, "uuid": "1e90eceb-388f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.38.47:51568/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776232330, "uuid": "3eb285b4-388f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.33.158:35473/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776232387, "uuid": "605a6d66-388f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776232748, "uuid": "3767fe61-3890-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.88/bin/support.client.exe", "Tag": [ { "name": "124-198-131-88", "colour": "#15bc44", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776232810, "uuid": "5c5e82cd-3890-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gift1.daily-bonus.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776232987, "uuid": "c628dca9-3890-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://c87x.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776233288, "uuid": "7994afbf-3891-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sailbreeze.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776233587, "uuid": "2bc9a56f-3892-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://serlineos8.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776233892, "uuid": "e19ff78f-3892-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://icematrix.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776233957, "uuid": "081b71bd-3893-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.38.47:51568/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776234132, "uuid": "706d1d13-3893-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.51.105:57343/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776234192, "uuid": "945facae-3893-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.173.223:45571/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776234192, "uuid": "949397e9-3893-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://du5t3-forge.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776234611, "uuid": "8e42e51e-3894-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sharpreel.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776234620, "uuid": "9377e966-3894-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.173.223:45571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776234971, "uuid": "6465cfce-3895-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pebcpxb.nor3liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776235027, "uuid": "8641cbb5-3895-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.242:8000/adobe.js", "Tag": [ { "name": "45-92-1-242-8000", "colour": "#3f3a49", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776235101, "uuid": "b200e558-3895-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.242:8080/winreg.exe", "Tag": [ { "name": "45-92-1-242-8080", "colour": "#f0b3f5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776235217, "uuid": "f754be3f-3895-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.89.11:41095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776235271, "uuid": "1782bbf1-3896-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trailerbinary.nor3liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776235632, "uuid": "eea7e736-3896-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://b4rk-panel.nor3liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776235638, "uuid": "f244d173-3896-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.51.105:57343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776235928, "uuid": "9ef6257f-3897-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://serlinear.nor3liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776236058, "uuid": "ec774951-3897-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.168.156:37154/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776236289, "uuid": "7607f3f5-3898-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://globalotter.nor3liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776236537, "uuid": "09d8699a-3899-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.89.11:41095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776236588, "uuid": "28ac4270-3899-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sol-draet.nor3liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776236724, "uuid": "79af6892-3899-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.239.144:48842/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776236889, "uuid": "db993918-3899-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://casualquant.vex8talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237023, "uuid": "2b9344fd-389a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.223.141:46488/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237314, "uuid": "d973cdd4-389a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lcr1.vex8talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237425, "uuid": "1ba33008-389b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.189.150:5000/savaw.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237426, "uuid": "1bb59311-389b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.189.150:5000/leas.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237426, "uuid": "1c049a5d-389b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.189.150:5000/jasdo.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237428, "uuid": "1d5bc575-389b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.189.150:5000/samso.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237428, "uuid": "1d62202b-389b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.189.150:5000/open.exe", "Tag": [ { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237429, "uuid": "1d7b8ad8-389b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.189.150:5000/sorna.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237429, "uuid": "1d7bc5e1-389b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.189.150:5000/simpo.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237429, "uuid": "1d819728-389b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.189.150:5000/javav.exe", "Tag": [ { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237429, "uuid": "1d86328e-389b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.189.150:5000/rena.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237429, "uuid": "1dc7f57b-389b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.189.150:5000/srapert.exe", "Tag": [ { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237429, "uuid": "1dd529be-389b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.189.150:5000/abrams.exe", "Tag": [ { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237429, "uuid": "1dd55a01-389b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.189.150:5000/cputr.exe", "Tag": [ { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237434, "uuid": "20fe2173-389b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.27.175:54653/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237485, "uuid": "3f2d7892-389b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.189.150:5000/kla.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237497, "uuid": "461f9357-389b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.47.190.105:45324/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237615, "uuid": "8c5faba7-389b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ofhbm4.vex8talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237740, "uuid": "d6e2e449-389b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.242:8000/winreg.exe", "Tag": [ { "name": "45-92-1-242-8000", "colour": "#3f3a49", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237799, "uuid": "fa4a8a04-389b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.171.177.193:57036/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776237799, "uuid": "fa4aa05f-389b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.46.177:44224/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776238210, "uuid": "eefc0e61-389c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xlknp.vex8talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776238388, "uuid": "592c8b81-389d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mcfupmvl.vex8talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776238450, "uuid": "7e7c4758-389d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.134.194:47895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776238628, "uuid": "e88aa8ad-389d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nky0.vex8talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776238870, "uuid": "78e71a97-389e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.223.141:46488/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776238990, "uuid": "c024fd78-389e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zencresten5.tul2qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776239113, "uuid": "093ea3c9-389f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.203.86.117:16670/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776239230, "uuid": "4f2220a5-389f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lbkonz.tul2qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776239468, "uuid": "dce0964b-389f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.87.118/bot-x86_64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776239469, "uuid": "dd61788e-389f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.24/rump222.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776239470, "uuid": "ddf5a716-389f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.248.79.33/Dvizhok.zip", "Tag": [ { "name": "CastleRAT", "colour": "#095cff", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776239477, "uuid": "e2b238e0-389f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ersesytuhbo.it.com/Dokumen-perusahaan.exe", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "golang", "colour": "#f34493", "exportable": true, "hide_tag": false }, { "name": "Loader", "colour": "#c23f3f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776239479, "uuid": "e3914209-389f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.89.2:55241/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776239479, "uuid": "e3a6c329-389f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.171.177.193:57036/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776239480, "uuid": "e418929f-389f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.245.97:55074/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776239480, "uuid": "e41cdb27-389f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.223.249/c.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776239485, "uuid": "e6ee7e06-389f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thomphon.com/payload/update.mso?tk=862f0dc11e2f77a809083b3bc818b6a5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776239647, "uuid": "47e341fd-38a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://njt8hire.tul2qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776239767, "uuid": "8f2d799c-38a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.38.130.143/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776239768, "uuid": "8fb3a8a0-38a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.38.130.143/rumpdbkfire.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776239769, "uuid": "9081faf7-38a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://valfanto.com/oboapril.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776239947, "uuid": "fabd4858-38a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://yil5.tul2qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776240013, "uuid": "21a2bde2-38a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.98.97.193:34651/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776240250, "uuid": "af4f0772-38a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://reagent-publ.tul2qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776240256, "uuid": "b2f9fea9-38a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.84.143:50168/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776240257, "uuid": "b3802f91-38a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.121.91:55536/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776240258, "uuid": "b3e72d14-38a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.186.230.74:54569/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776240426, "uuid": "17ccf50d-38a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dump.win/bLRkm.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776240427, "uuid": "18b280f9-38a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.173.143.118/nesrmp.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776240489, "uuid": "3d5dbc5e-38a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://krikadoo.com/wp-admin/network/update.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776240615, "uuid": "8870fef8-38a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sfunited.club/kwdhur.vmp.msi", "Tag": [ { "name": "Loda", "colour": "#58eac9", "exportable": true, "hide_tag": false }, { "name": "LodaRAT", "colour": "#9499f9", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776240619, "uuid": "8b25294f-38a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitcoins.homes/zwoxeq.vmp.msi", "Tag": [ { "name": "Loda", "colour": "#58eac9", "exportable": true, "hide_tag": false }, { "name": "LodaRAT", "colour": "#9499f9", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776240731, "uuid": "cdd8b839-38a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/rodriakd-8413d.appspot.com/o/dll%2Fjs.txt?alt=media&token=09ada575-efa9-4dc8-b331-404723b5997a", "Tag": [ { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776240852, "uuid": "15d853aa-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://krikadoo.com/478469/update.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776240909, "uuid": "37d3c172-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://inn35-dock.tul2qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776240968, "uuid": "5ae315cd-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.postimg.cc/R01gW6zd/snake.png", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241029, "uuid": "7f48c944-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Hyperbolic531/Makethen/refs/heads/main/miahdoo.txt", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241041, "uuid": "86b156be-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.79.173:52857/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241092, "uuid": "a503cbf5-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-r0ut.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241146, "uuid": "c5216b6d-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/A-835PCS.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241146, "uuid": "c5216c72-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/ST#2025-0073.scr", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241146, "uuid": "c52d92f0-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/SV#202503.scr", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241147, "uuid": "c60678c9-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/HT-8272.rar", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241148, "uuid": "c6554173-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/SV#2025-006.scr", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241148, "uuid": "c6a2a25c-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/PO#2025-435.scr", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241148, "uuid": "c6a7f40e-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/Doc#2025-0053.pif", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241148, "uuid": "c6acc40a-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/Con#64525.exe.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241149, "uuid": "c6c6c2d3-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/A-739PCS.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241149, "uuid": "c6cfede1-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/Lanpb.scr", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241149, "uuid": "c73935ef-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/HT9262.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241150, "uuid": "c7985138-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/a89667.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241150, "uuid": "c7cd07e8-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/bvx1TflM4CXqqX8.pif", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241151, "uuid": "c84611c2-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/Dxxqbzem.scr", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241151, "uuid": "c8574cde-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/HT-2725.rar", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241151, "uuid": "c86de0d5-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/JT-0635.rar", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241152, "uuid": "c8b97323-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/CerealisorderSV#2023-007.rar", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241152, "uuid": "c8b97968-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/HT-0035.scr", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241152, "uuid": "c8b97bea-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/Bosshyperaw(1).zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241152, "uuid": "c8b98500-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/Bosshyperaw.exe", "Tag": [ { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241152, "uuid": "c8c8236c-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/Bosshyperaw.exe.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241152, "uuid": "c8d1da06-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/BOLICFILE.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "c935880d-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/SMTB-73443.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "c957a320-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/update.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "c97cc297-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/robin_harker@btconnect.com.exe", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "c981ae49-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/AT-35560.exe", "Tag": [ { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "c98a0f6c-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/bin.exe", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "c98b18b8-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/update1.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "c9918487-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/client.exe", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "c991892a-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/A-2025-03545.7z", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "c99960d4-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/AT5423.7z", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241153, "uuid": "c9b1b39d-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/ST982.rar", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241155, "uuid": "ca50d2af-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/FT-26436DU(2).pif", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241155, "uuid": "ca8444a4-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/HT02528_8w77.js", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241156, "uuid": "cae63ffc-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/FD-830-0054.pif", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241156, "uuid": "caf03257-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/xe.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241156, "uuid": "caf03f80-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/XWormClient44.exe", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241156, "uuid": "caf9d394-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/robin_harker@btconnect.com.rar", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241156, "uuid": "cb0884c9-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/AU2025-0097.7z", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241156, "uuid": "cb0eebb2-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/FT3763PDF.scr", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241156, "uuid": "cb5b4e88-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/HT-0037.scr", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241157, "uuid": "cbf2f52d-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/JT-0635.scr", "Tag": [ { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241159, "uuid": "ccc90a92-38a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.42.21:53307/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241330, "uuid": "32c7d556-38a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://aumri.ae/rump1_MSI.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241387, "uuid": "5526bdac-38a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vtdlwy.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241390, "uuid": "56e64731-38a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://aumri.ae/img_053925.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241396, "uuid": "5a406ea1-38a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://check.nid-log.com/pc/bootservice.php?tag=2136&query=1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Kimsuky", "colour": "#a2b707", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241687, "uuid": "076653a3-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://file1-raw.cloud-storage-unit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241695, "uuid": "0ca48cae-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://29mpmnz7.pra5noxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241695, "uuid": "0ca4fbbe-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://view2-data.clear-stream-web.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241696, "uuid": "0ce46123-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://step2-flow.active-phase-net.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241696, "uuid": "0d00b349-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://genome2-line.xelvorimax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241696, "uuid": "0d210f8d-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tun1-pipe.secure-proxy-way.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241697, "uuid": "0dce720b-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://city1-spot.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241698, "uuid": "0e07af68-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://card2-fast.brief-point-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241699, "uuid": "0ef837a1-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cinem-graph.xelvorimax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241699, "uuid": "0f08e6ac-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vor-nexal.drumirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241703, "uuid": "11485236-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mark5-logo.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241704, "uuid": "1199a7db-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://task1-core.active-phase-net.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241705, "uuid": "128bb5c1-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://work6-host.active-phase-net.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241706, "uuid": "12d37e21-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://client1-zone.smart-logic-trade.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241706, "uuid": "12d97f38-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://table4-data.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241706, "uuid": "12e9ff54-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sandsto.pra5noxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241706, "uuid": "12f95053-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node2-ssh.remote-access-node.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241706, "uuid": "1319ef8e-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://note3-base.brief-point-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241706, "uuid": "1336ec64-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://auth7-core.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241706, "uuid": "1346b433-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://plan3-item.active-phase-net.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241707, "uuid": "1357a607-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://time1-out.global-server-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241707, "uuid": "137ed138-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://itncq.xelvorimax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241752, "uuid": "2e7f94a5-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.134.194:47895/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241752, "uuid": "2e854261-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://site4-info.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241753, "uuid": "2ecd037f-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://map4.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241753, "uuid": "2ed6fd46-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open6.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241753, "uuid": "2ee9ab79-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://news5.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241753, "uuid": "2ef2f8ad-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sheet5-view.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241754, "uuid": "2f964a70-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://upzr.zen4qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241754, "uuid": "2fe60675-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://order1-list.global-export-base.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241755, "uuid": "30495ffc-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://area2-find.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241761, "uuid": "33ac6299-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://front6-gate.prime-sector-unit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241761, "uuid": "33d90dc8-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cover6-link.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241762, "uuid": "343d14cb-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gift1.daily-bonus.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241763, "uuid": "35155d56-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://user5.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241764, "uuid": "3595669c-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base6-door.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241764, "uuid": "359adef7-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://news1-wire.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241764, "uuid": "35e18e43-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://serlineos8.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241765, "uuid": "3611c69a-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://topic3-base.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241765, "uuid": "362cc0d8-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://darkspark.zen4qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241767, "uuid": "3718cb1d-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://c87x.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241767, "uuid": "372436bb-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://link1-wire.brief-point-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241767, "uuid": "37250073-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zone3-view.local-vision-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241767, "uuid": "372aee91-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241767, "uuid": "372af548-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sort3-item.clear-stream-web.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241767, "uuid": "374c488e-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://top3.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241767, "uuid": "3751635f-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best2.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241767, "uuid": "3773be19-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blog3.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241767, "uuid": "377a4374-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://event2-log.daily-report-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241810, "uuid": "5129f318-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sailbreeze.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241815, "uuid": "53d74dd5-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://list4.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776241988, "uuid": "bb56810d-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://t1de-vault.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242047, "uuid": "de25ad29-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.170.9/129/goodthingsforbetterforme.hta", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242049, "uuid": "df77fa36-38a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dubaitechnicalservice.ae/prood/kolodial.dat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242109, "uuid": "0330f4ba-38a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.87.163:46674/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242109, "uuid": "0361e3b9-38a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pc24.app/InITkj", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242167, "uuid": "2598602b-38a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.155.94/27/greatattitudeforme.hta", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242226, "uuid": "48fa69eb-38a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/Y4vF6WVi", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242228, "uuid": "4a22edce-38a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/nsRc9G6c", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242231, "uuid": "4c162435-38a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/rodriakd-8413d.appspot.com/o/dll%2Fdllnew.txt?alt=media&token=630e2807-b89c-4645-b3dc-dc407ccae141", "Tag": [ { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242287, "uuid": "6d338db5-38a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://engine-switch.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242290, "uuid": "6f200095-38a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastefy.app/DIIv4cCL/raw", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242291, "uuid": "6fc415e1-38a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastefy.app/dEelcT2f/raw", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242292, "uuid": "70283ace-38a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hasteb.in/A3YoN6yQ8YuR914", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242350, "uuid": "92d7b35a-38a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.121.91:55536/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242596, "uuid": "25672e2d-38a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.79.173:52857/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242655, "uuid": "48d8a7cf-38a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zorvex.life/enter/image.png", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242715, "uuid": "6c5157c7-38a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vel-markon.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242718, "uuid": "6e37377d-38a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://frostcrypt.org/putty2.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242766, "uuid": "8ad1404f-38a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.postimg.cc/MpTPrKVq/luisscore.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242825, "uuid": "addc0a92-38a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://andrefelipedonascime1775471117328.2082219.meusitehostgator.com.br/FVTwhWzaQj_06_04_Meus_ArquivosDeTexto//02.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242825, "uuid": "adedc1f7-38a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://catalogo.castrouria.com/bl.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242830, "uuid": "b14166fd-38a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://andrefelipedonascime1775471117328.2082219.meusitehostgator.com.br/FVTwhWzaQj_06_04_Meus_ArquivosDeTexto//03.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242831, "uuid": "b171cd4c-38a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://andrefelipedonascime1775471117328.2082219.meusitehostgator.com.br/FVTwhWzaQj_06_04_Meus_ArquivosDeTexto//01.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776242889, "uuid": "d46b2340-38a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.232.4:49639/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776243008, "uuid": "1b2faab3-38a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gtps4change.org/wp-includes/images/crystal/Image/image.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776243010, "uuid": "1c2bb6b0-38a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastefy.app/HDpHYVg6/raw", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776243136, "uuid": "6719d415-38a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-fc10525f25d247e4a38787b5b64673ec.r2.dev/AdobeInstaller.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776243245, "uuid": "a85ee8c4-38a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://store9.gofile.io/download/direct/cad2b711-6299-4806-9b5a-c439bf6b2e5d/LogMeInResolve_Unattended.msi", "Tag": [ { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776243246, "uuid": "a927f892-38a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://server-vall.prax5litor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776243376, "uuid": "f6b3b89d-38a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.137.40:59014/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776243489, "uuid": "39db46e3-38a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://observ-phase.prax5litor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776243667, "uuid": "a3c19051-38a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trimark4or.prax5litor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776243981, "uuid": "5ee0f778-38aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.252.86:60563/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776244090, "uuid": "9fbe6e6f-38aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bridge0-crest.prax5litor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776244629, "uuid": "e10d168c-38ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sprbridg.prax5litor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776244632, "uuid": "e31170fd-38ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.196.20:43172/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776244691, "uuid": "06730639-38ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.137.40:59014/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776244748, "uuid": "281a9ccf-38ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tfovt.prax5litor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776245052, "uuid": "dd203182-38ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.68.195:43548/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776245052, "uuid": "dd26ea18-38ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5pro4-vector.zor4melax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776245352, "uuid": "90196820-38ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wygb7.zor4melax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776245469, "uuid": "d5c76aec-38ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.78.200:41934/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776245469, "uuid": "d5fb2669-38ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.252.86:60563/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776245650, "uuid": "4189dbc8-38ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://c0rnpute-stream.zor4melax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776246021, "uuid": "1efd9594-38af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.145.175:38494/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776246070, "uuid": "3c1d973c-38af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://compre-node.zor4melax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776246259, "uuid": "acdc6826-38af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.196.20:43172/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776246369, "uuid": "eea90d35-38af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pwmyu.zor4melax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776246556, "uuid": "5dd793e1-38b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.140.238:43524/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776246667, "uuid": "9ff0aee7-38b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xoqairj.zor4melax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776246675, "uuid": "a502acd4-38b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.107.89:44805/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776247089, "uuid": "9b421ff3-38b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hardscript.dru9vexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776247387, "uuid": "4d382df8-38b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hpryikjw.dru9vexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776247391, "uuid": "4fbc5e95-38b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.33.244:33964/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776247454, "uuid": "75131e1e-38b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.114.173:58513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776247507, "uuid": "946e4a3f-38b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8468794285/TRcuArC.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776247748, "uuid": "2459824f-38b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://g4th2-mount.dru9vexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776248054, "uuid": "dac1b090-38b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qu4r9-scope.dru9vexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776248240, "uuid": "49ac9b70-38b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.140.238:43524/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776248353, "uuid": "8cf7e398-38b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lively-obser.dru9vexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776248417, "uuid": "b2d1f6f7-38b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.167.27:43387/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776248535, "uuid": "f9b0d922-38b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.219.212:55537/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776248586, "uuid": "17e88d35-38b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.82:60262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776248600, "uuid": "20551920-38b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.150.68:42660/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776248774, "uuid": "87beba5f-38b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tenquarr.dru9vexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776248899, "uuid": "d2150345-38b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.114.173:58513/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776248899, "uuid": "d28753e4-38b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.239.110:55225/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776248899, "uuid": "d296d6d9-38b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.126.217:34806/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776249073, "uuid": "3a5119b4-38b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ar2ymo.bri1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776249144, "uuid": "642f45ea-38b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.126.217:34806/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776249374, "uuid": "ed60138d-38b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://1ndex2-gate.bri1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776249682, "uuid": "a518aaaf-38b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.89.54.21:54243/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776249731, "uuid": "c22e3e50-38b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.82:60262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776249733, "uuid": "c3b9b09a-38b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://k3rne-signal.bri1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776249801, "uuid": "ec4d9444-38b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.140.188:40277/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776249925, "uuid": "35cf8e70-38b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.245.186:38392/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776250094, "uuid": "9a7057b7-38b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zecyxfgt.bri1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776250221, "uuid": "e614164a-38b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.6.62:58047/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776250222, "uuid": "e6d7845a-38b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.167.27:43387/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776250284, "uuid": "0bbcf8c0-38b9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.65.119:46153/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776250285, "uuid": "0c56cfc7-38b9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.237.131:40238/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776250388, "uuid": "49ca62ac-38b9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumnex7os.bri1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776250402, "uuid": "523be96e-38b9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.234.141:51923/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776250512, "uuid": "93c63d57-38b9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.150.68:42660/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776250770, "uuid": "2d69ff3e-38ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.20.212:59988/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776250811, "uuid": "45d1cfcb-38ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zenmark1a.bri1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776250942, "uuid": "940a346b-38ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.239.110:55225/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251115, "uuid": "fb2898c3-38ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://opt13-mesh.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251119, "uuid": "fdc5a3d8-38ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.89.54.21:54243/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251168, "uuid": "1ae3c7e8-38bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.9/NRtjBsNChHKAhi148.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251169, "uuid": "1b2a02ce-38bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.9/fibulae.afm", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251183, "uuid": "23b715b4-38bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.140.188:40277/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251240, "uuid": "457d23a1-38bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.246.207:50326/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251360, "uuid": "8d467fc3-38bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.245.186:38392/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251414, "uuid": "ad919ebb-38bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clusterbright.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251421, "uuid": "b167084c-38bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.236.223:44027/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251465, "uuid": "cba30b26-38bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7048186296/tYX9ODo.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251474, "uuid": "d12a8111-38bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.232.52:45999/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251542, "uuid": "f9d2cf22-38bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.232.52:45999/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251648, "uuid": "3927c446-38bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.125.102.244:8081/CORTEX_DEMO_Setup.exe", "Tag": [ { "name": "185-125-102-244-8081", "colour": "#c98d3c", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251649, "uuid": "39421606-38bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.125.102.244:8081/CORTEX_Setup.exe", "Tag": [ { "name": "185-125-102-244-8081", "colour": "#c98d3c", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251721, "uuid": "6448b146-38bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.219.212:55537/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776251773, "uuid": "83a788de-38bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quordraa.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776252137, "uuid": "5c6855d6-38bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://normarkis2.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776252435, "uuid": "0dce204c-38be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://emuwa.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776252445, "uuid": "13bfe432-38be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.3.225:32998/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776252561, "uuid": "58d093de-38be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.18:33075/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776252794, "uuid": "e3f28ef5-38be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dr1ve-trail.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776252861, "uuid": "0bc324c8-38bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.9.20:47396/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776252927, "uuid": "331ddaab-38bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.246.207:50326/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776253089, "uuid": "939dde38-38bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ind3-spool.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776253102, "uuid": "9b9b2298-38bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.236.223:44027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776253328, "uuid": "2217b0f1-38c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://138.124.61.210:9999/setup.ps1", "Tag": [ { "name": "138-124-61-210-9999", "colour": "#35d76e", "exportable": true, "hide_tag": false }, { "name": "MeshAgent", "colour": "#985f9d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776253393, "uuid": "491c9570-38c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dwkch.ru/meshagents?id=3&meshid=g3qQmGuuQeuKcWATXQJ2kFRNAVgYUYMIbGileCXMMUiSABwlmUBigllxjAOCx30b&installflags=3", "Tag": [ { "name": "dwkch-ru", "colour": "#2edd7e", "exportable": true, "hide_tag": false }, { "name": "MeshAgent", "colour": "#985f9d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776253446, "uuid": "686b628a-38c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8717422379/PHu1YkL.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776253455, "uuid": "6de43087-38c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://m0ss5-watch.nor3liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776253461, "uuid": "7153cc75-38c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://138.124.61.210:9999/svchost-update.exe", "Tag": [ { "name": "138-124-61-210-9999", "colour": "#35d76e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776253464, "uuid": "7365771d-38c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.200.235:40944/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776253749, "uuid": "1d19dd04-38c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://il2l4822.vex8talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776253867, "uuid": "63c698af-38c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.28/11/goodthingswithbestspeakforme.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776254173, "uuid": "19f58403-38c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://routerwago.tul2qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776254415, "uuid": "a9e0615b-38c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.30.107:46688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776254469, "uuid": "ca75062d-38c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-f0rge.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776254600, "uuid": "18397361-38c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.9.20:47396/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776254769, "uuid": "7d5e883f-38c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gp0zfju.prax5litor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776255012, "uuid": "0e1219e2-38c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.16.92:41467/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776255129, "uuid": "53e16b0f-38c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nimblehon.zor4melax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776255432, "uuid": "083696e5-38c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.242.213:60501/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776255729, "uuid": "b975ff8b-38c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://columnapi.dru9vexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776255791, "uuid": "de48cdca-38c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://weedhack.xyz/files/jar/component", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776255793, "uuid": "dfd193ff-38c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://weedhack.xyz/files/jar/module2", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776255794, "uuid": "e0113c7b-38c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://weedhack.xyz/files/jar/RuntimeBroker.exe", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776255794, "uuid": "e03ee6c3-38c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://weedhack.xyz/files/jar/elevator", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776255795, "uuid": "e072b747-38c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://weedhack.xyz/files/jar/module", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776255796, "uuid": "e1306483-38c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://weedhack.xyz/files/jar/security", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776255915, "uuid": "27f7a0d9-38c6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sxbrp.bri1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776255923, "uuid": "2ce73a07-38c6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.93.113:58335/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776256089, "uuid": "8fb15037-38c6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zsj7xqo.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776256461, "uuid": "6dd27000-38c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.8.231:50785/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776256509, "uuid": "8a449c89-38c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.238.150:49952/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776256754, "uuid": "1c084883-38c8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.194.122.39:38327/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776256817, "uuid": "4207febc-38c8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.16.92:41467/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776257052, "uuid": "ce133483-38c8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.242.213:60501/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776257053, "uuid": "ce859e3b-38c8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.34.11:51635/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776257238, "uuid": "3c9c69e1-38c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.93.113:58335/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258310, "uuid": "bbe4e2cb-38cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kemo828/test/raw/refs/heads/main/ssa.vbs", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258310, "uuid": "bbe534aa-38cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kemo828/test/raw/refs/heads/main/TruckController.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258311, "uuid": "bc388a79-38cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kemo828/kr/raw/refs/heads/main/ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258312, "uuid": "bcfca1ea-38cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kemo828/test/raw/refs/heads/main/setup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258314, "uuid": "bdf5760e-38cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kemo828/screen/raw/refs/heads/main/RMM.vbs", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258316, "uuid": "bf7e7e56-38cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kemo828/screen/raw/refs/heads/main/panel82.vbs", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258317, "uuid": "bff99d96-38cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kemo828/screen/raw/refs/heads/main/setup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258318, "uuid": "c04c219f-38cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kemo828/test/raw/refs/heads/main/ConnectWiseControl.ClientSetup%20(6).msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258318, "uuid": "c04fa6e3-38cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kemo828/screen/raw/refs/heads/main/ragap.vbs", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258318, "uuid": "c091f6cf-38cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kemo828/test/raw/refs/heads/main/ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258318, "uuid": "c0b6d369-38cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kemo828/screen/raw/refs/heads/main/ConnectWiseControl.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258318, "uuid": "c0c60305-38cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kemo828/screen/raw/refs/heads/main/ragap.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "kemo828", "colour": "#349d65", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258319, "uuid": "c0d7af9c-38cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.173.192:40682/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258319, "uuid": "c1144c1b-38cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/cblootah/test/raw/refs/heads/main/payload.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258367, "uuid": "de05c8e3-38cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://saqo.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258548, "uuid": "497f8279-38cc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vera.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258800, "uuid": "dffc985e-38cc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.28/11/img_015451.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258850, "uuid": "fdaafe12-38cc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/3R1v7Cs1", "Tag": [ { "name": "memz", "colour": "#ee2666", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776258910, "uuid": "215e320f-38cd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://next.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776259088, "uuid": "8b82cb29-38cd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynflux6al.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776259094, "uuid": "8ee0045a-38cd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.227.35:42997/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776259147, "uuid": "ae6d1b73-38cd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dump.win/cqr69.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776259450, "uuid": "638b5cbb-38ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ice-mark.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776259510, "uuid": "86c2e123-38ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.9/aGYAyzKwCah149.bin", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776259510, "uuid": "86f10380-38ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.9/Gonio.dwp", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776259630, "uuid": "ce663081-38ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/qrexf0.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776259647, "uuid": "d8931e48-38ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.107.251:46114/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776259747, "uuid": "14198c26-38cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fundoasis.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776259756, "uuid": "19e25e3a-38cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.40.151:38778/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776259816, "uuid": "3d7b52da-38cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.173.192:40682/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776260047, "uuid": "c71e8db3-38cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://motmolecu.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776260227, "uuid": "3281653a-38d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stylegeneration.ma/sirdee.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776260237, "uuid": "388f0b9c-38d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.227.35:42997/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776260409, "uuid": "9eb77cf6-38d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vor-coreum.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776260413, "uuid": "a12d5565-38d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://corwineagles.com/deskes.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776260469, "uuid": "c2aa52a1-38d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gtps4change.org//wp-admin/maint/image.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776260709, "uuid": "51e759bb-38d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://t0mbk.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776260961, "uuid": "e79a4f3f-38d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.3.70.107:49607/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776261074, "uuid": "2afa97bc-38d2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://valleydispatcher.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776261187, "uuid": "6e73e4a5-38d2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.57.41:51491/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776261429, "uuid": "feab1ad6-38d2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fi3rce7-watch.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776261792, "uuid": "d6f0e9d9-38d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sketchneuron.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776261858, "uuid": "fe5cbb24-38d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.111.43:54726/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776261975, "uuid": "44878821-38d4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hyperbolic531/Makethen/raw/refs/heads/main/%E6%96%87%E6%A1%A382524.exe", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776262152, "uuid": "add336ff-38d4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://talfluxen3.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776262448, "uuid": "5e3b2b30-38d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://syxnh65t.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776262570, "uuid": "a7175456-38d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.158.22:37929/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776262811, "uuid": "3659e8d8-38d6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zdjine7o.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776263169, "uuid": "0c16d5ca-38d7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://velline0os.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776263182, "uuid": "13845070-38d7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.233.58.128:49872/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776263606, "uuid": "106642a9-38d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.111.43:54726/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776263617, "uuid": "16f71881-38d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.233.58.128:49872/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776263709, "uuid": "4dc93d1a-38d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://streambreeze.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776263885, "uuid": "b6dee142-38d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastefy.app/1blfqyva/raw", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776263890, "uuid": "b9744683-38d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ychgg.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776264021, "uuid": "07c412ee-38d9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.249.5:55895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776264128, "uuid": "475a9c70-38d9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flovv-chain.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776264376, "uuid": "db863ed5-38d9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.158.22:37929/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776264426, "uuid": "f92c293b-38d9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shiftcascade.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776264786, "uuid": "d0109254-38da-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://encodersensor.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776265151, "uuid": "a98d1697-38db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5ync-lab.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776265338, "uuid": "18a61dfe-38dc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.249.5:55895/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776265810, "uuid": "324d863b-38dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sercore2or.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776265927, "uuid": "77f063a6-38dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bay-banne.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776266060, "uuid": "c7314210-38dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.202.59:35563/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776266179, "uuid": "0de481b8-38de-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.15.169:58470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776266291, "uuid": "5108c3aa-38de-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://queryguard.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776266476, "uuid": "beda7d98-38de-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.18:33075/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776266652, "uuid": "2849a53e-38df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://birdout.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776266733, "uuid": "5832e365-38df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.193.144.146:34187/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776266947, "uuid": "d7c9fa6c-38df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wilpol.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776267308, "uuid": "af2e57a2-38e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.202.59:35563/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776267311, "uuid": "b0890a74-38e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://registryfaithful.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776267667, "uuid": "85086ae5-38e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solnex0ex.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776267910, "uuid": "15e1d912-38e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://massivespectra.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776268156, "uuid": "a8a8cb71-38e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.193.144.146:34187/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776268268, "uuid": "eb50ef15-38e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://proto-dynam1.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776268689, "uuid": "e64c5cbf-38e3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-tok3.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776268703, "uuid": "ee436148-38e3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.29.232:59399/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776268932, "uuid": "772d73dc-38e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://freshstorage.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776269287, "uuid": "4aa04734-38e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nnid.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776269593, "uuid": "010efddb-38e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arrayshore.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776269954, "uuid": "d86898e6-38e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://par5e-array.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776270248, "uuid": "879f11b5-38e7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lnrjp.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776270427, "uuid": "f259174d-38e7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.115.143:43465/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776270684, "uuid": "8af60e2d-38e8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.186:39096/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776270915, "uuid": "15066cfa-38e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vialstr.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776271101, "uuid": "840c69c1-38e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mervaleon1.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776271103, "uuid": "851b4fa9-38e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.211.180:39386/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776271284, "uuid": "f0c32038-38e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.95.141:38054/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776271332, "uuid": "0d7d78f7-38ea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xxvxsk4x.zor2laven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776271694, "uuid": "e54dd56e-38ea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bm1rtmr.zor2laven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776271761, "uuid": "0d715560-38eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.203.48:53522/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776271878, "uuid": "52c05bbe-38eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.91.202:42546/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776272053, "uuid": "bb535b15-38eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.186:39096/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776272054, "uuid": "bbc9dcc3-38eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://h4rve5-loop.zor2laven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776272177, "uuid": "054651fb-38ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.80.157:38990/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776272301, "uuid": "4ef164b8-38ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.88:56139/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776272301, "uuid": "4f3f48ef-38ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.211.54:46717/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776272356, "uuid": "6ff83bd4-38ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://proxyeas.zor2laven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776272651, "uuid": "1f77b02e-38ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lps08.zor2laven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776272786, "uuid": "6ff549d3-38ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.211.180:39386/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776272899, "uuid": "b3742213-38ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.115.143:43465/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776272951, "uuid": "d263d75c-38ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tlnsb.zor2laven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776273315, "uuid": "abacc9a8-38ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://jjfcpkvh.dru6moxin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776273554, "uuid": "39a8d930-38ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.23.104.28:53587/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776273554, "uuid": "39d35456-38ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.88:56139/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776273629, "uuid": "66cf9ec1-38ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.254.82:55738/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776273673, "uuid": "80ed8c48-38ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trimarket.dru6moxin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776273729, "uuid": "a278881d-38ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/fornessa/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776273732, "uuid": "a42bd35a-38ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/hopeinfully/Silentum-Spoofer/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776273732, "uuid": "a4315f29-38ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/landeliur/FiveM-Spoofer/refs/heads/main/CFXBypass.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776273733, "uuid": "a44dce6e-38ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/fornessa/Silentum-Spoofer/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776273733, "uuid": "a4526fc5-38ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/landeliur/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776273733, "uuid": "a490a95d-38ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/hopeinfully/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776273919, "uuid": "13a90e75-38f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.80.157:38990/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776273969, "uuid": "31451275-38f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.211.54:46717/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776273970, "uuid": "31f3b3ac-38f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.27.197:40257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776273973, "uuid": "33bfa0c2-38f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fr0st-branch.dru6moxin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776274043, "uuid": "5d77b00f-38f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.120.85:39543/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776274047, "uuid": "5fd7deb9-38f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.78.240:56843/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776274088, "uuid": "78602a58-38f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.27.197:40257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776274215, "uuid": "c39e438c-38f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/flyretths/heavenlis/-/raw/main/4J8576A0E8V3.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776274392, "uuid": "2da0c7f2-38f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://011kep.dru6moxin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776274463, "uuid": "577a1b53-38f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.194.122.39:38327/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776274644, "uuid": "c3cc1860-38f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.240.187:55276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776274689, "uuid": "de4c3c67-38f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ihrydwg.dru6moxin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776274990, "uuid": "91f7fc7d-38f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/cM1g9kdE", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776275050, "uuid": "b5b0c8bd-38f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shallo-uni.dru6moxin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776275115, "uuid": "dc2690fc-38f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/camm1ls/deviloff/refs/heads/main/4J8576A0E8V3.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776275170, "uuid": "fcf255d7-38f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/camm1ls/deviloff/raw/refs/heads/main/4J8576A0E8V3.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776275294, "uuid": "47495182-38f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.17.175:60838/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776275413, "uuid": "8db79865-38f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.17.175:60838/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776275413, "uuid": "8dcb11b2-38f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.254.8.106:47404/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776275415, "uuid": "8f231e1b-38f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ioncove.bri4talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776275468, "uuid": "aea7a6b8-38f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.25.51:56197/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776275483, "uuid": "b7d78481-38f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.75.73:40184/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776275588, "uuid": "f5f762b9-38f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.217.180:48512/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776275708, "uuid": "3de96fcf-38f4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://2ffmg.bri4talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776276013, "uuid": "f39879b8-38f4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qhbvndc7.bri4talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776276071, "uuid": "1617cbb0-38f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.26.251:42222/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776276084, "uuid": "1e243b3c-38f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.170.101:51903/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776276369, "uuid": "c7c25768-38f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tal-forgear.bri4talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776276967, "uuid": "2c70c74c-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://t1ny-point.bri4talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277086, "uuid": "7332e492-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.i468", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "i468", "colour": "#4c21a6", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277087, "uuid": "7394d789-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://uc9b6922e6f1f1bf6572fc66063e.dl.dropboxusercontent.com/cd/0/get/C-pqOuyr-PJAO-1qFleTZQk8lgaoVRLonPDrE7Fi4IwabdWg1Kog5zZjJ7cVJ7vg-Du_IM6tSgkcvzzG1ug5ih3EQLzmjaKuCfD4qJOeG9rw7tIk0-jonICTFxK-1oI0Hx8w-dlOq6ao1agEh2CpgQ15/file?dl=1#", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277087, "uuid": "73d3303f-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.arc", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277087, "uuid": "73d8b622-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.mips", "Tag": [ { "name": "Boatnet", "colour": "#ba2b39", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "mips.", "colour": "#b8bb5f", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277087, "uuid": "73e4e179-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.199.55.11/XKcNhY4G8rcYpb.sh", "Tag": [ { "name": "Boatnet", "colour": "#ba2b39", "exportable": true, "hide_tag": false }, { "name": "cnc", "colour": "#96ec5e", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277087, "uuid": "73e8f1d1-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.x86", "Tag": [ { "name": "Boatnet", "colour": "#ba2b39", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277087, "uuid": "73ef88ba-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://uc11ec97a00822a6a1724fc7f4c0.dl.dropboxusercontent.com/cd/0/get/C-kRZDlkn33pXVucpo4-Fj7Dbpl86LGc1HykI6H6kSfS9o30PfFfTEGcekVgy9wAntb5RIdRoRXgJIe71LeNl07vSqdSqdwRjSOZVlB-eqzxtWUWUQp3qdYUsO5099btB8fqbOF5xGmQwQr6KcqUrd9o/file?dl=1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277087, "uuid": "73f1e9b2-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.i686", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "i686", "colour": "#24db2b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277090, "uuid": "75612014-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.77.255.35/std.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277090, "uuid": "7562ab3b-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.77.255.35/script.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277091, "uuid": "765d8ca8-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.dropbox.com/scl/fi/owz3sdy6gmyni1jlhrsdw/mugiwara_installer.exe?rlkey=3ohsmwu2wd3mqxrnpjdti27et&st=awdrtify&dl=1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277146, "uuid": "96ca2dec-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://FGx8SNCa4txePA.sh4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277148, "uuid": "98578389-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.arm6", "Tag": [ { "name": "arm6", "colour": "#cceccb", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277149, "uuid": "9874aaa1-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.sh4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "sh4", "colour": "#d7d89b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277149, "uuid": "9874af74-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.spc", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "spc", "colour": "#ef98c3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277149, "uuid": "9875505d-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.arm7", "Tag": [ { "name": "arm7", "colour": "#5a1c73", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277149, "uuid": "9876a24e-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.x86_64", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "x86_64", "colour": "#8e3094", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277149, "uuid": "987b9fc2-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.mpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mpsl", "colour": "#53e137", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277149, "uuid": "987e0977-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.m68k", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277149, "uuid": "987e3bcf-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.ppc", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ppc", "colour": "#c6d8f0", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277149, "uuid": "988a0f0f-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.arm5", "Tag": [ { "name": "arm5", "colour": "#3ad44d", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277149, "uuid": "98b9acc2-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://weedhack.xyz/files/jar/Pjibf.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277150, "uuid": "9938c34c-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vel-spireex.bri4talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277152, "uuid": "9a447c99-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://photgridyelow.site/duck/modulo/foto.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277155, "uuid": "9c442af5-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.199.55.11/Vye32GsS2g38eKHmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bot", "colour": "#9258e9", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277216, "uuid": "c0ac940f-38f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.29.232:59399/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277395, "uuid": "2b19a945-38f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://planslow.qen8lorix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277691, "uuid": "dc05127c-38f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://unitecres.qen8lorix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277945, "uuid": "732387d1-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.217.180:48512/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277946, "uuid": "73ba7af1-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.235.127:40429/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277990, "uuid": "8e272120-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ESKIBABBLE/Tensr/refs/heads/main/src/io/Software-1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277990, "uuid": "8e3127da-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/SuperDev699/CheatSheet-LLM/refs/heads/main/textbook_create/textbook-pdf/Sheet_Cheat_LLM_2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277991, "uuid": "8e4fdf6f-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/yomyoms/Netflix-N-Hack/refs/heads/main/payloads/Hack_Netflix_3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277991, "uuid": "8ebe961b-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ittaloakk/cursor/refs/heads/main/heterotaxic/Software_v1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277991, "uuid": "8ebf8907-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/yomyoms/claude-proxy-flask/refs/heads/main/api/flask_claude_proxy_2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277991, "uuid": "8ecdbfc6-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/yomyoms/Netflix-N-Hack/raw/refs/heads/main/payloads/Hack_Netflix_3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277992, "uuid": "8ee2536d-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/notghost634-cyber/RBust/refs/heads/main/src/R_Bust_v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277992, "uuid": "8eed2fe4-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.26.251:42222/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277992, "uuid": "8efdfde6-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/apothegmatic-whiskfern276/autosteer/raw/refs/heads/main/src/stores/__tests__/Software-2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277992, "uuid": "8f12274a-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/apothegmatic-whiskfern276/autosteer/refs/heads/main/src/stores/__tests__/Software-2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277992, "uuid": "8f25b31f-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/vnx12/Zetian/raw/refs/heads/develop/src/Zetian/Models/EventArgs/Software_v1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277992, "uuid": "8f26cf05-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/yomyoms/claude-proxy-flask/raw/refs/heads/main/api/flask_claude_proxy_2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277992, "uuid": "8f53c692-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/yomyoms/SillyTavern-Docker/refs/heads/main/maidenhair/Silly-Docker-Tavern-midtap.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277992, "uuid": "8f5c3bb1-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/nottvixn/devops-journey/refs/heads/main/PROJECTS/journey-devops-1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277993, "uuid": "8fe11f76-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Brazilian-willametteriver232/llama.swift/raw/refs/heads/main/Sources/llama-swift-v2.7-beta.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277993, "uuid": "8ff4d148-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Luizin507/fourmeme-trading-bot/raw/refs/heads/main/img/fourmeme-trading-bot-v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277994, "uuid": "90117eaf-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/vnx12/Zetian/refs/heads/develop/src/Zetian/Models/EventArgs/Software_v1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277994, "uuid": "9012ad4e-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Hymieincorrupt440/Ideate/refs/heads/main/packages/eslint-config/Software-v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277994, "uuid": "902ce921-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hymieincorrupt440/Ideate/raw/refs/heads/main/packages/eslint-config/Software-v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277994, "uuid": "9032e07e-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Luizin507/fourmeme-trading-bot/refs/heads/main/img/fourmeme-trading-bot-v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277994, "uuid": "90685a0b-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/yomyoms/SillyTavern-Docker/raw/refs/heads/main/maidenhair/Silly-Docker-Tavern-midtap.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277994, "uuid": "90690a8d-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/nottvixn/devops-journey/raw/refs/heads/main/PROJECTS/journey-devops-1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277995, "uuid": "90c6c3ec-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/yomyoms/SillyTavern-MoonlitEchoesTheme/refs/heads/main/i18n/Echoes_Silly_Tavern_Moonlit_Theme_3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277995, "uuid": "90df36eb-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/yomyoms/oai-proxy-mod/raw/refs/heads/main/src/proxy/middleware/request/mutators/mod_oai_proxy_v1.3-beta.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277995, "uuid": "90fb72b4-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/LightDopper/skill-codex/refs/heads/master/irrationality/skill_codex_sentient.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277995, "uuid": "910f83c8-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/yomyoms/oai-proxy-mod/refs/heads/main/src/proxy/middleware/request/mutators/mod_oai_proxy_v1.3-beta.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277995, "uuid": "9111ee78-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/yomyoms/chatgpt_telegram_bot/refs/heads/main/bot/bot-chatgpt-telegram-2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277995, "uuid": "91125886-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/sunxholejabi/bc-game-crash-predictor/raw/refs/heads/main/CrashPredictor.Test/Markup/predictor-crash-game-bc-2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277995, "uuid": "9112ab64-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Brazilian-willametteriver232/llama.swift/refs/heads/main/Sources/llama-swift-v2.7-beta.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277995, "uuid": "912468e4-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/LightDopper/skill-codex/raw/refs/heads/master/irrationality/skill_codex_sentient.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277995, "uuid": "912d6080-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ittaloakk/cursor/raw/refs/heads/main/heterotaxic/Software_v1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277995, "uuid": "912d6cd8-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/yomyoms/SillyTavern-MoonlitEchoesTheme/raw/refs/heads/main/i18n/Echoes_Silly_Tavern_Moonlit_Theme_3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277995, "uuid": "9132c06c-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ESKIBABBLE/Tensr/raw/refs/heads/main/src/io/Software-1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277995, "uuid": "913db77d-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/yomyoms/chatgpt_telegram_bot/raw/refs/heads/main/bot/bot-chatgpt-telegram-2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277996, "uuid": "9170990b-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/notghost634-cyber/RBust/raw/refs/heads/main/src/R_Bust_v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277996, "uuid": "917145b9-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/qwetamoe/sailarr-installer/refs/heads/main/config/autoscan/installer_sailarr_3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277996, "uuid": "9176a8a6-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/qwetamoe/sailarr-installer/raw/refs/heads/main/config/autoscan/installer_sailarr_3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277996, "uuid": "91858a04-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/K12trappy/bifrost/refs/heads/main/src/utils/Software_subchondral.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277996, "uuid": "9185ba69-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/sunxholejabi/bc-game-crash-predictor/refs/heads/main/CrashPredictor.Test/Markup/predictor-crash-game-bc-2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776277996, "uuid": "9189055e-38f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/K12trappy/bifrost/raw/refs/heads/main/src/utils/Software_subchondral.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278949, "uuid": "c989aad9-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/123Luka123/k3s-proxmox-terraform/refs/heads/main/docs/terraform-s-k-proxmox-frontierlike.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278949, "uuid": "c9aa66be-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/sionetukuafu919-design/MEV-by-JaredFromSubway/refs/heads/main/sussultatory/Subway-Jared-From-ME-by-2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278949, "uuid": "c9abe3d7-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/sionetukuafu919-design/MEV-by-JaredFromSubway/raw/refs/heads/main/sussultatory/Subway-Jared-From-ME-by-2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278949, "uuid": "c9b94f6a-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/S2D0N/bnb-copy-trading-bot-go/raw/refs/heads/main/retinula/trading_bot_copy_go_bnb_3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278949, "uuid": "c9c767b4-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Cocklelaceration337/Simakin/raw/refs/heads/main/app/Software-unshot.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278949, "uuid": "c9cb294e-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/S2D0N/bnb-copy-trading-bot-go/refs/heads/main/retinula/trading_bot_copy_go_bnb_3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278950, "uuid": "ca23b160-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Mikelzlll/migraine-solana-pumpfun-aio-bot/refs/heads/main/underconsume/bot-aio-migraine-pumpfun-solana-dinosaurian.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278951, "uuid": "cab637d1-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/mikexell/react-express-docker/raw/refs/heads/main/client/src/react-express-docker-v1.0-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278951, "uuid": "cab7e339-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Mikelzlll/migraine-solana-pumpfun-aio-bot/raw/refs/heads/main/underconsume/bot-aio-migraine-pumpfun-solana-dinosaurian.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278951, "uuid": "cac721ca-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.62.56:45049/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278952, "uuid": "cb1499a5-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/zebulenlithophytic371/algorithmic-trading-platform/raw/refs/heads/main/agents/algorithmic-trading-platform-1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278952, "uuid": "cb6a8cc8-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://s0ck-spool.qen8lorix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278953, "uuid": "cbafdd99-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kartik944/relizy/raw/refs/heads/main/src/core/__tests__/Software_v2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278953, "uuid": "cbb728cd-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/zebulenlithophytic371/algorithmic-trading-platform/refs/heads/main/agents/algorithmic-trading-platform-1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278953, "uuid": "cbcfcca4-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Novice-Cloud/workflow/raw/refs/heads/main/packages/world-postgres/src/drizzle/migrations/Software_v1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278953, "uuid": "cbefc110-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hardcore-bioengineering120/think/raw/refs/heads/master/gestative/Software_v1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278954, "uuid": "cc897feb-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/gustavomnhee/lima/raw/refs/heads/master/pkg/localpathutil/Software_v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278954, "uuid": "cc9a4d5a-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/gustavomnhee/lima/refs/heads/master/pkg/localpathutil/Software_v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278954, "uuid": "ccd14137-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.134.89:58398/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278955, "uuid": "ccf6ecfc-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/longphamok1323/2025doubao-free-api/refs/heads/master/public/doubao_api_free_inanga.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278955, "uuid": "cd05c547-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/roseannspastic496/pyspark-etl-automation/raw/refs/heads/main/pridelessly/etl-automation-pyspark-3.4-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278955, "uuid": "cd0705c1-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Pranavbarskar/pluralsight-aws-data-pipelines-orchestrating-automating/raw/refs/heads/main/module-2/module-2-demo-3-parallel-map/lambdas/generate-datasets/automating_data_pipelines_aws_orchestrating_pluralsight_2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278955, "uuid": "cd07e6d2-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Cocklelaceration337/Simakin/refs/heads/main/app/Software-unshot.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278955, "uuid": "cd244368-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://duskparce.qen8lorix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278955, "uuid": "cd2d8d30-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/roseannspastic496/pyspark-etl-automation/refs/heads/main/pridelessly/etl-automation-pyspark-3.4-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278955, "uuid": "cd33f804-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/wsbs20/claude-code-aso-skill/raw/refs/heads/main/.claude/skills/code-aso-claude-skill-v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278955, "uuid": "cd3b5402-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/mikexell/react-express-docker/refs/heads/main/client/src/react-express-docker-v1.0-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278955, "uuid": "cd43b04e-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/123Luka123/k3s-proxmox-terraform/raw/refs/heads/main/docs/terraform-s-k-proxmox-frontierlike.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278955, "uuid": "cd47cf8f-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Hardcore-bioengineering120/think/refs/heads/master/gestative/Software_v1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278955, "uuid": "cd47f500-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/kartik944/relizy/refs/heads/main/src/core/__tests__/Software_v2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278955, "uuid": "cd4aedfb-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Novice-Cloud/workflow/refs/heads/main/packages/world-postgres/src/drizzle/migrations/Software_v1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278955, "uuid": "cd4ba389-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Pranavbarskar/pluralsight-aws-data-pipelines-orchestrating-automating/refs/heads/main/module-2/module-2-demo-3-parallel-map/lambdas/generate-datasets/automating_data_pipelines_aws_orchestrating_pluralsight_2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278955, "uuid": "cd4ba815-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/wsbs20/claude-code-aso-skill/refs/heads/main/.claude/skills/code-aso-claude-skill-v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278955, "uuid": "cd55bb91-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://subtcav.qen8lorix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278955, "uuid": "cd5a9fcb-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Menor1111/iSCSI-Setup-Tutorial-on-Linux-Mint/raw/refs/heads/main/deloul/Linux-on-Tutorial-Mint-i-Setup-SCS-unclosable.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278955, "uuid": "cd5ac17a-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/longphamok1323/2025doubao-free-api/raw/refs/heads/master/public/doubao_api_free_inanga.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278955, "uuid": "cd6373ef-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/SuperDev699/CheatSheet-LLM/raw/refs/heads/main/textbook_create/textbook-pdf/Sheet_Cheat_LLM_2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776278956, "uuid": "cd808228-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Menor1111/iSCSI-Setup-Tutorial-on-Linux-Mint/refs/heads/main/deloul/Linux-on-Tutorial-Mint-i-Setup-SCS-unclosable.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279008, "uuid": "ec9b8f06-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/rizkiameli/blog-starter-template/refs/heads/main/lib/blog_template_starter_2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279012, "uuid": "ef49f89e-38fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/rizkiameli/blog-starter-template/raw/refs/heads/main/lib/blog_template_starter_2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279127, "uuid": "337b0fb6-38fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solmeshos.qen8lorix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279365, "uuid": "c1be83ad-38fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dispgua.factpre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279428, "uuid": "e718bd68-38fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/cemanosdesolidao/hedged-rpc-client/refs/heads/main/src/client_hedged_rpc_v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279428, "uuid": "e72541b6-38fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/JallinskyLuca/EntregaNumero2/refs/heads/main/sulphohydrate/Numero-Entrega-mandua.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279428, "uuid": "e7596960-38fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/evilpratama17/Arweave-Academy/refs/heads/main/submissions/xMevan%202/challenge2/node_modules/kleur/Academy-Arweave-v1.9-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "e7b037c1-38fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Godie09/laravel-12-routeserviceprovider-configuration-tutorial/refs/heads/main/database/configuration_laravel_tutorial_routeserviceprovider_v2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "e7b084fd-38fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/gseu41/powersub-demo-1000/refs/heads/main/antasphyctic/demo-powersub-v1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "e7b0ed8f-38fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/evilpratama17/powersub-demo-9758/refs/heads/main/Ericales/demo_powersub_3.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "e7b20a9f-38fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/JallinskyLuca/EntregaFinal/refs/heads/main/css/Final-Entrega-3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "e7bb094c-38fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Godie09/laravel-12-routeserviceprovider-configuration-tutorial/raw/refs/heads/main/database/configuration_laravel_tutorial_routeserviceprovider_v2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "e7bb13d5-38fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/JallinskyLuca/Diagrama/raw/refs/heads/main/leptocephalic/Software-1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "e7c8bddd-38fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/evilpratama17/powersub-demo-9758/raw/refs/heads/main/Ericales/demo_powersub_3.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "e7d70ba7-38fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/JallinskyLuca/ai-etl-anomaly-detection/raw/refs/heads/main/data/anomaly_etl_ai_detection_2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "e7d718c8-38fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/gseu41/powersub-demo-1000/raw/refs/heads/main/antasphyctic/demo-powersub-v1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "e7d782b5-38fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Flix-ux/powersub-demo-7484/raw/refs/heads/main/transpeer/powersub_demo_v3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "e7e5fda4-38fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/JallinskyLuca/Diagrama/refs/heads/main/leptocephalic/Software-1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "e7f63548-38fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/cemanosdesolidao/hedged-rpc-client/raw/refs/heads/main/src/client_hedged_rpc_v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279429, "uuid": "e7f82e77-38fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/JallinskyLuca/ai-etl-anomaly-detection/refs/heads/main/data/anomaly_etl_ai_detection_2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279430, "uuid": "e80a10e0-38fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/JallinskyLuca/EntregaNumero2/raw/refs/heads/main/sulphohydrate/Numero-Entrega-mandua.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279431, "uuid": "e8a14b0b-38fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Flix-ux/powersub-demo-7484/refs/heads/main/transpeer/powersub_demo_v3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279431, "uuid": "e8ce9d62-38fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/evilpratama17/Arweave-Academy/raw/refs/heads/main/submissions/xMevan%202/challenge2/node_modules/kleur/Academy-Arweave-v1.9-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279431, "uuid": "e8d5a76e-38fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/JallinskyLuca/EntregaFinal/raw/refs/heads/main/css/Final-Entrega-3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279728, "uuid": "99b79460-38fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hibcn.factpre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279848, "uuid": "e1933318-38fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/KingFahmee12/AIND-Workshops/raw/refs/heads/main/DevCon25NYC/examples/AIN_Workshops_v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279848, "uuid": "e1982978-38fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/KingFahmee12/AIND-Workshops/refs/heads/main/DevCon25NYC/examples/AIN_Workshops_v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279848, "uuid": "e1983b3f-38fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Junayedahmedd/assignment-1/refs/heads/main/img/assignment-2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279848, "uuid": "e1aa17c6-38fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Junayedahmedd/gemini_cli_skill/refs/heads/main/mammillation/cli_skill_gemini_v3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279849, "uuid": "e1c8c2af-38fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Junayedahmedd/assignment-2/refs/heads/main/img/assignment_Shelyak.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279849, "uuid": "e1c8c54a-38fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Junayedahmedd/assignment-2/raw/refs/heads/main/img/assignment_Shelyak.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279849, "uuid": "e1c8cc83-38fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Junayedahmedd/assignment-1/raw/refs/heads/main/img/assignment-2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279849, "uuid": "e1cc2a12-38fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Yawnspe/custom-plugin-devops/refs/heads/master/.github/workflows/plugin-devops-custom-2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279849, "uuid": "e1cc8567-38fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Junayedahmedd/tailwindProject/refs/heads/main/node_modules/string-width-cjs/node_modules/ansi-regex/tailwind_Project_v2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279849, "uuid": "e1d00d64-38fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Junayedahmedd/gemini_cli_skill/raw/refs/heads/main/mammillation/cli_skill_gemini_v3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279849, "uuid": "e1e33a92-38fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/isaacww/var-lighter-auto-tool/raw/refs/heads/main/turbinatoglobose/tool-lighter-var-auto-v3.6-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279849, "uuid": "e1ea25b0-38fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Junayedahmedd/tailwindProject/raw/refs/heads/main/node_modules/string-width-cjs/node_modules/ansi-regex/tailwind_Project_v2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776279849, "uuid": "e20601de-38fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/isaacww/var-lighter-auto-tool/refs/heads/main/turbinatoglobose/tool-lighter-var-auto-v3.6-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "fa676cf5-38ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Yawnspe/custom-plugin-devops/raw/refs/heads/master/.github/workflows/plugin-devops-custom-2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "fa7782bf-38ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Reddinton95/custom-plugin-backend/raw/refs/heads/main/agents/02-database-management/backend-plugin-custom-1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "fa78393d-38ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/guitupetidutra-ship-it/dr-tulu/refs/heads/main/agent/evaluation/genetic_diseases_eval/tulu-dr-v2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "fa8e2f9d-38ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Isaac1993-io/Test-Practice/raw/refs/heads/master/embrail/Test_Practice_1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "fa9418b6-38ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Reddinton95/custom-plugin-backend/refs/heads/main/agents/02-database-management/backend-plugin-custom-1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "fa975f45-38ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Isaac1993-io/flutter-modern-template/refs/heads/master/android/app/src/main/kotlin/com/example/moderntemplate/modern_flutter_template_troptometer.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "faacd563-38ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Isaac1993-io/Galaxcity-Project/raw/refs/heads/main/submembranaceous/Project_Galaxcity_Chlorococcales.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "fabe9383-38ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Isaac1993-io/JAVA-journey/raw/refs/heads/main/Oracle_JDK-24/journey_JAV_2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "fabeca06-38ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Isaac1993-io/My-Software-Journey/refs/heads/main/HTML%20projects/static%20images/My_Software_Journey_1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280749, "uuid": "fabf8f2e-38ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Isaac1993-io/Test-Practice/refs/heads/master/embrail/Test_Practice_1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280750, "uuid": "fac201c9-38ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Isaac1993-io/My-Software-Journey/raw/refs/heads/main/HTML%20projects/static%20images/My_Software_Journey_1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280750, "uuid": "fac45e17-38ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Isaac1993-io/flutter-modern-template/raw/refs/heads/master/android/app/src/main/kotlin/com/example/moderntemplate/modern_flutter_template_troptometer.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280752, "uuid": "fc014f8e-38ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Isaac1993-io/KWS-Project/raw/refs/heads/main/Pics/Project_KW_1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280752, "uuid": "fc1dec46-38ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Isaac1993-io/Galaxcity-Project/refs/heads/main/submembranaceous/Project_Galaxcity_Chlorococcales.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280752, "uuid": "fc2d6db3-38ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Isaac1993-io/KWS-Project/refs/heads/main/Pics/Project_KW_1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280752, "uuid": "fc3a3ae3-38ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Isaac1993-io/JAVA-journey/refs/heads/main/Oracle_JDK-24/journey_JAV_2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280752, "uuid": "fc53f562-38ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/guitupetidutra-ship-it/dr-tulu/raw/refs/heads/main/agent/evaluation/genetic_diseases_eval/tulu-dr-v2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280752, "uuid": "fc571aa0-38ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://39rd.factpre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280752, "uuid": "fc7cd77a-38ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nv7cx.factpre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776280770, "uuid": "06cc4ba9-3900-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.132.253:38398/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281713, "uuid": "391bd8b1-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Jonisark/Djast/refs/heads/main/4.3%20HTML%20Porfolio%20Project/Software_2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281713, "uuid": "392b7db5-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/etabra098/kids-drag-drop-game2/raw/refs/heads/main/ethmophysal/kids_drop_game_drag_v3.4-alpha.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281713, "uuid": "3931abda-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/etabra098/kids-drag-drop-game2/refs/heads/main/ethmophysal/kids_drop_game_drag_v3.4-alpha.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281713, "uuid": "3931cb48-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/etabra098/gmmms/refs/heads/main/chegoe/Software_v2.5-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281713, "uuid": "393b4ef1-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Jonisark/html-portfolioes/refs/heads/main/someone/html_portfolioes_1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281714, "uuid": "395c9dae-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/etabra098/gma/refs/heads/main/aegrotant/Software-1.3-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281714, "uuid": "397eb7ab-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Jonisark/git-demo/raw/refs/heads/main/unresponsiveness/demo_git_v2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281714, "uuid": "398a25da-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Jonisark/git-demo/refs/heads/main/unresponsiveness/demo_git_v2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281714, "uuid": "39b12bfa-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/etabra098/fdgdfg/refs/heads/main/.github/workflows/Software_v3.3-alpha.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281714, "uuid": "39edfe14-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/etabra098/gmmms/raw/refs/heads/main/chegoe/Software_v2.5-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281715, "uuid": "3a07db09-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Jonisark/Djast/raw/refs/heads/main/4.3%20HTML%20Porfolio%20Project/Software_2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281715, "uuid": "3a433da9-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/etabra098/gma/raw/refs/heads/main/aegrotant/Software-1.3-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281715, "uuid": "3a5247cf-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Jonisark/joni/raw/refs/heads/main/epiklesis/Software-1.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281715, "uuid": "3a7d5434-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/etabra098/dark-thema-saas/raw/refs/heads/main/assets/images/people/thema-saas-dark-v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281716, "uuid": "3a8d071a-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/nikhildaharwal2004/context.nvim/raw/refs/heads/main/lua/nvim_context_2.5-beta.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281716, "uuid": "3a90732e-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://69cy8114.factpre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281716, "uuid": "3ad2fef0-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Jonisark/html-portfolioes/raw/refs/heads/main/someone/html_portfolioes_1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281716, "uuid": "3af40c2e-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/etabra098/dark-thema-saas/refs/heads/main/assets/images/people/thema-saas-dark-v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281716, "uuid": "3af9afc4-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/nikhildaharwal2004/context.nvim/refs/heads/main/lua/nvim_context_2.5-beta.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281717, "uuid": "3b384561-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dyndraex.expect-runes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281717, "uuid": "3b4c38c9-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://invoicecel.factpre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281717, "uuid": "3b4c3a6d-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/etabra098/fdgdfg/raw/refs/heads/main/.github/workflows/Software_v3.3-alpha.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281717, "uuid": "3b726f98-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-dec0d.expect-runes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281725, "uuid": "405cd54f-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.93.65:49840/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281726, "uuid": "40857414-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.31.201.20:50854/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281727, "uuid": "411d2f38-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.183.105:45907/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281727, "uuid": "41214596-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.65.119:46153/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281727, "uuid": "418321e7-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.7.168:34470/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281727, "uuid": "41936dd6-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.14.171:43027/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281727, "uuid": "4194f6d6-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.134.89:58398/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281888, "uuid": "a1687350-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://2cpd365m.plaque5tucco.digital/?ublib=cYhUuFFcXbMZGTPx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281950, "uuid": "c67cd7c3-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/FacundoNimes/linkedin-playwright-auto-job-application-agent/refs/heads/main/unlassoed/job-application-linkedin-playwright-auto-agent-v1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281952, "uuid": "c757db18-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/FacundoNimes/fullstack-open/raw/refs/heads/master/part1-react/anecdotes/open_fullstack_v3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281952, "uuid": "c758f9ab-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Shubham-dds/shubham-dds.github.io/refs/heads/main/teaman/io_shubham_github_dds_2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281952, "uuid": "c76d81ab-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/FacundoNimes/fullstack-open/refs/heads/master/part1-react/anecdotes/open_fullstack_v3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281952, "uuid": "c78ce01d-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hariprakash2005/phishingAttack/raw/refs/heads/main/undeferentially/phishing_Attack_2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281952, "uuid": "c7b2bf26-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/FacundoNimes/vanillawebprojects/raw/refs/heads/master/speech-text-reader/Software-3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281952, "uuid": "c7b6475b-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/PMEBorromeo/fastapi-microservice-template/raw/refs/heads/main/biographize/template-microservice-fastapi-v1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281953, "uuid": "c7cea740-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/FacundoNimes/vanillawebprojects/refs/heads/master/speech-text-reader/Software-3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281953, "uuid": "c7db4952-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Shubham-dds/P2M/refs/heads/main/conda_setup/etc/M_v1.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281953, "uuid": "c7e0b315-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hariprakash2005/hacking/raw/refs/heads/main/screendom/Software-2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281953, "uuid": "c829f952-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/FacundoNimes/HTML-CSS-JavaScript-projects-for-beginners/raw/refs/heads/main/projects/background-video-project/projects-Script-Java-HTM-CS-for-beginners-1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281953, "uuid": "c82c1cc8-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/celin213/FastAPITutorials/refs/heads/main/example_06/domain/API-Tutorials-Fast-v1.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281953, "uuid": "c831031e-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Hariprakash2005/defense/refs/heads/main/Bourignianist/Software_2.7-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281953, "uuid": "c8489f6c-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Crazy444-yo/crazy444-yo.github.io/raw/refs/heads/main/highlight/crazy-io-github-yo-v1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281953, "uuid": "c84d2069-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Hariprakash2005/phishingAttack/refs/heads/main/undeferentially/phishing_Attack_2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281953, "uuid": "c858cfbd-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Sushant6t9/sushant6t9.github.io/refs/heads/main/undigestable/io_github_sushant_t_simiousness.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281954, "uuid": "c86a7acf-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Crazy444-yo/crazy444-yo.github.io/refs/heads/main/highlight/crazy-io-github-yo-v1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281954, "uuid": "c8950110-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Hariprakash2005/hacking/refs/heads/main/screendom/Software-2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281954, "uuid": "c89a21d3-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Shubham-dds/shubham-dds.github.io/raw/refs/heads/main/teaman/io_shubham_github_dds_2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281954, "uuid": "c8a2117b-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hariprakash2005/defense/raw/refs/heads/main/Bourignianist/Software_2.7-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281954, "uuid": "c8bac9fc-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Sushant6t9/inngest-course/raw/refs/heads/main/chapter02/inngest_course_3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281954, "uuid": "c8c5f959-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Sushant6t9/inngest-course/refs/heads/main/chapter02/inngest_course_3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281954, "uuid": "c8cd800e-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/PMEBorromeo/pmeborromeo.github.io/raw/refs/heads/main/acrodont/io_pmeborromeo_github_v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281955, "uuid": "c925d9c5-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Shubham-dds/P2M/raw/refs/heads/main/conda_setup/etc/M_v1.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281955, "uuid": "c94b5241-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/PMEBorromeo/pmeborromeo.github.io/refs/heads/main/acrodont/io_pmeborromeo_github_v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281955, "uuid": "c96c2ca6-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/nkarthik61/nkarthik61.github.io/raw/refs/heads/main/ventripotential/nkarthik-io-github-v1.8-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776281955, "uuid": "c96e5417-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/PMEBorromeo/fastapi-microservice-template/refs/heads/main/biographize/template-microservice-fastapi-v1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282017, "uuid": "ee58c4aa-3902-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Crazy444-yo/bgpsec-falcon512/refs/heads/main/examples/bgpsec-falcon-v3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282105, "uuid": "22d2123e-3903-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ArgyaSR/Auction-App-Data-Processing_AWS-Pipeline/refs/heads/main/sql/Auction_App_AW_Data_Processing_Pipeline_v1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282105, "uuid": "22d23108-3903-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/nkarthik61/nkarthik61.github.io/refs/heads/main/ventripotential/nkarthik-io-github-v1.8-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282137, "uuid": "35df4cba-3903-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/celin213/FastAPITutorials/raw/refs/heads/main/example_06/domain/API-Tutorials-Fast-v1.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282165, "uuid": "4697efb3-3903-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/FacundoNimes/linkedin-playwright-auto-job-application-agent/raw/refs/heads/main/unlassoed/job-application-linkedin-playwright-auto-agent-v1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282908, "uuid": "018ae1e0-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/nkarthik61/BaxtureProject/refs/heads/main/.vscode/Baxture_Project_v1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282910, "uuid": "027da12e-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Sushant6t9/sushant6t9.github.io/raw/refs/heads/main/undigestable/io_github_sushant_t_simiousness.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282910, "uuid": "027dac09-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Eggggx/85/refs/heads/main/23/74/14.log", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282910, "uuid": "028dfc5b-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/nkarthik61/BaxtureProject/raw/refs/heads/main/.vscode/Baxture_Project_v1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282912, "uuid": "03949cf4-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Eggggx/85/refs/heads/main/23/74/50.txt", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282913, "uuid": "04059365-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Eggggx/85/raw/refs/heads/main/23/74/50.txt", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282913, "uuid": "04803b15-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/FacundoNimes/HTML-CSS-JavaScript-projects-for-beginners/refs/heads/main/projects/background-video-project/projects-Script-Java-HTM-CS-for-beginners-1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282913, "uuid": "049698bf-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hariprakash2005/CUDABurner/raw/refs/heads/main/utils/CUDA_Burner_v2.9-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282914, "uuid": "050a2fac-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/FacundoNimes/golab-documentation/refs/heads/main/content/golab-documentation-nondocumentary.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282915, "uuid": "057249e6-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Crazy444-yo/bgpsec-falcon512/raw/refs/heads/main/examples/bgpsec-falcon-v3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282915, "uuid": "05a7eb29-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ArgyaSR/Auction-App-Data-Processing_AWS-Pipeline/raw/refs/heads/main/sql/Auction_App_AW_Data_Processing_Pipeline_v1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282915, "uuid": "05a7eedb-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/FacundoNimes/golab-documentation/raw/refs/heads/main/content/golab-documentation-nondocumentary.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282915, "uuid": "05c3aaaf-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Eggggx/85/raw/refs/heads/main/23/74/14.log", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282916, "uuid": "05cfad2d-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Hariprakash2005/CUDABurner/refs/heads/main/utils/CUDA_Burner_v2.9-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282916, "uuid": "05da98c9-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wnokm63.expect-runes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282916, "uuid": "05f168ad-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rave3-layer.expect-runes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282916, "uuid": "05fc26e1-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://servena.expect-runes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282920, "uuid": "08c40838-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.14.171:43027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282921, "uuid": "09583483-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.15.184:34786/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282922, "uuid": "09672633-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.129.145.2:34181/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776282934, "uuid": "10d70b81-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.132.253:38398/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283149, "uuid": "90ea2e74-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://partn4-bridge.expect-runes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283281, "uuid": "dfac0386-3905-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.10.133.113:42905/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283397, "uuid": "247fca9f-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.10.133.113:42905/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283452, "uuid": "45a2ac9e-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/S11lmi/s11lmi.github.io/refs/heads/main/bahay/io_s_github_lmi_v1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283452, "uuid": "45ac2f71-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/rzgarothman/nanomlops/refs/heads/master/alibangbang/Software-v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283452, "uuid": "45acfd12-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/S11lmi/resume-polish/refs/heads/main/src/resume-polish-3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "45e3fb17-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/rzgarothman/rzgarothman.github.io/refs/heads/main/geological/io-github-rzgarothman-v2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "45e5abb2-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/S11lmi/resume-polish/raw/refs/heads/main/src/resume-polish-3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "461064bb-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/nguyenchuong-az/nguyenchuong-az.github.io/refs/heads/main/migration/github-nguyenchuong-io-az-v3.7-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "4619e9ca-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/victorrwyd/victorrwyd.github.io/refs/heads/main/winebibber/io-github-victorrwyd-3.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "4623bbaa-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/nguyenchuong-az/dproxy/raw/refs/heads/main/wheelbarrowful/Software_1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "462e152d-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/S11lmi/s11lmi.github.io/raw/refs/heads/main/bahay/io_s_github_lmi_v1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "463f0f1c-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/rzgarothman/nanomlops/raw/refs/heads/master/alibangbang/Software-v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "463f729d-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/S11lmi/kbgdlbbdh/raw/refs/heads/main/.github/Software_1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "4640818c-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/nguyenchuong-az/nguyenchuong-az.github.io/raw/refs/heads/main/migration/github-nguyenchuong-io-az-v3.7-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "46504868-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Rahul-Raj-04/netflix/refs/heads/main/src/components/spinner/Software_3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "46556a73-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/victorrwyd/EaseUS-Todo-PCTrans-Pro-Repack/raw/refs/heads/main/linguistics/Pro_U_Repack_Ease_PC_Todo_Trans_v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "4656a964-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/S11lmi/kbgdlbbdh/refs/heads/main/.github/Software_1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283453, "uuid": "46706e1c-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Rahul-Raj-04/ecommerce/raw/refs/heads/main/src/Component/PageHeader/Software_electrodeless.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283454, "uuid": "4685a391-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Dophinjet/lunarlander-dqn-comparison/refs/heads/main/notebook/lunarlander_comparison_dqn_v2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283454, "uuid": "46bc5cd5-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/itextreme/itextreme.github.io/raw/refs/heads/main/unteasled/io-github-itextreme-v1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283454, "uuid": "46bc87c4-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/itextreme/PHP-React-Framework/raw/refs/heads/master/src/components/React-PH-Framework-v1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283454, "uuid": "46c2efde-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/itextreme/itextreme.github.io/refs/heads/main/unteasled/io-github-itextreme-v1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283454, "uuid": "46d17005-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/victorrwyd/EaseUS-Todo-PCTrans-Pro-Repack/refs/heads/main/linguistics/Pro_U_Repack_Ease_PC_Todo_Trans_v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283454, "uuid": "46dade80-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Dophinjet/dophinjet.github.io/raw/refs/heads/main/ruficoccin/dophinjet_io_github_v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283454, "uuid": "46dd58b8-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/victorrwyd/victorrwyd.github.io/raw/refs/heads/main/winebibber/io-github-victorrwyd-3.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283454, "uuid": "46e6aafc-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Dophinjet/lunarlander-dqn-comparison/raw/refs/heads/main/notebook/lunarlander_comparison_dqn_v2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283454, "uuid": "46e828e5-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Rahul-Raj-04/ecommerce/refs/heads/main/src/Component/PageHeader/Software_electrodeless.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283454, "uuid": "46f511b9-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Rahul-Raj-04/netflix/raw/refs/heads/main/src/components/spinner/Software_3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283454, "uuid": "47025d16-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Rahul-Raj-04/theemclock/refs/heads/main/repressible/Software_2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283454, "uuid": "4707a5c6-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/itextreme/PHP-React-Framework/refs/heads/master/src/components/React-PH-Framework-v1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283455, "uuid": "47238152-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Dophinjet/dophinjet.github.io/refs/heads/main/ruficoccin/dophinjet_io_github_v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283455, "uuid": "4723b0ca-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/nguyenchuong-az/dproxy/refs/heads/main/wheelbarrowful/Software_1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283455, "uuid": "473114c5-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Rahul-Raj-04/theemclock/raw/refs/heads/main/repressible/Software_2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776283455, "uuid": "4745c9db-3906-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://glashado.imperturbs1av.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "5f1b882e-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kunalkalia2610/pebblecreek-laravel/raw/refs/heads/master/bootstrap/pebblecreek_laravel_v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "5f30acf5-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/KnigthFrodo/RootTH/refs/heads/master/geggery/Root_TH_3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "5f3177e6-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/enescoban43/System-Constitution/refs/heads/main/schema/System_Constitution_v2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "5f3214f8-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/adidasyadebiras228/docker-nvidia-gpu-ml/refs/heads/master/docs/gpu_docker_ml_nvidia_v2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "5f371ec5-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/kunalkalia2610/pebblecreek-laravel/refs/heads/master/bootstrap/pebblecreek_laravel_v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "5f47752c-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/KnigthFrodo/knigthfrodo.github.io/raw/refs/heads/main/assigned/github_io_knigthfrodo_disprove.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "5f477b73-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/KnigthFrodo/knigthfrodo.github.io/refs/heads/main/assigned/github_io_knigthfrodo_disprove.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "5f477e3e-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/GGplayerp/amp-contrib/refs/heads/main/.agents/skills/tmux/contrib_amp_Auscultoscope.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "5f48090d-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Bladerex24/simple-llm/refs/heads/master/model/simple_llm_v3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284354, "uuid": "5f4f3540-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/KnigthFrodo/xmrig/refs/heads/master/src/backend/opencl/runners/Software-2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284355, "uuid": "5f8a48d5-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/GGplayerp/amp-contrib/raw/refs/heads/main/.agents/skills/tmux/contrib_amp_Auscultoscope.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284355, "uuid": "5f9363e6-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Bladerex24/bladerex24.github.io/refs/heads/main/bondwoman/github-bladerex-io-v2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284355, "uuid": "5f93736c-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/KnigthFrodo/RootTH/raw/refs/heads/master/geggery/Root_TH_3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284355, "uuid": "5fb2d8bc-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/adidasyadebiras228/adidasyadebiras228.github.io/refs/heads/main/gangsman/io-github-adidasyadebiras-v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284355, "uuid": "5fbf8ada-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/KnigthFrodo/xmrig/raw/refs/heads/master/src/backend/opencl/runners/Software-2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284355, "uuid": "5fc48e26-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Bladerex24/simple-llm/raw/refs/heads/master/model/simple_llm_v3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284355, "uuid": "5fc4b737-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/kunalkalia2610/kunalkalia2610.github.io/refs/heads/main/Peridineae/io_github_kunalkalia_idosaccharic.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284355, "uuid": "5fc6c707-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kunalkalia2610/kunalkalia2610.github.io/raw/refs/heads/main/Peridineae/io_github_kunalkalia_idosaccharic.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284355, "uuid": "5fc85a54-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/KnigthFrodo/planning-system/raw/refs/heads/main/dev/plans/plugin-conversion/planning_system_v2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284355, "uuid": "5fd9342c-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/enescoban43/System-Constitution/raw/refs/heads/main/schema/System_Constitution_v2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284355, "uuid": "5fdac594-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Bladerex24/bladerex24.github.io/raw/refs/heads/main/bondwoman/github-bladerex-io-v2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284355, "uuid": "5fef164a-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/rzgarothman/rzgarothman.github.io/raw/refs/heads/main/geological/io-github-rzgarothman-v2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284356, "uuid": "601baa35-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/adidasyadebiras228/docker-nvidia-gpu-ml/raw/refs/heads/master/docs/gpu_docker_ml_nvidia_v2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284356, "uuid": "602d4411-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/KnigthFrodo/planning-system/refs/heads/main/dev/plans/plugin-conversion/planning_system_v2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284356, "uuid": "603a699a-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/GGplayerp/ggplayerp.github.io/refs/heads/main/strangury/github_ggplayerp_io_v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284356, "uuid": "6041053a-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/GGplayerp/ggplayerp.github.io/raw/refs/heads/main/strangury/github_ggplayerp_io_v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284356, "uuid": "604ba268-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kunalkalia2610/antigravity-proxy/raw/refs/heads/master/unbehaving/antigravity-proxy-3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284357, "uuid": "60b59885-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/enescoban43/enescoban43.github.io/raw/refs/heads/main/unbastilled/io-github-enescoban-1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284357, "uuid": "60c7acf0-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/enescoban43/enescoban43.github.io/refs/heads/main/unbastilled/io-github-enescoban-1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284357, "uuid": "60d43bd3-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xcmw.imperturbs1av.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284358, "uuid": "618d1a83-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.168.31:45145/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284359, "uuid": "61f5cb18-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.129.145.2:34181/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284359, "uuid": "620f8ada-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.138.85:37006/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776284365, "uuid": "659df7e7-3908-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/adidasyadebiras228/adidasyadebiras228.github.io/raw/refs/heads/main/gangsman/io-github-adidasyadebiras-v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285309, "uuid": "985d22b4-390a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/kunalkalia2610/antigravity-proxy/refs/heads/master/unbehaving/antigravity-proxy-3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285312, "uuid": "9a27e53d-390a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/lavadood6909/lavadood6909.github.io/refs/heads/main/unsuitably/lavadood_io_github_2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285312, "uuid": "9a3ee219-390a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/lavadood6909/mql5-jetbrains/raw/refs/heads/main/scutellae/jetbrains-mql-3.8-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285312, "uuid": "9a4d8bae-390a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://euwt.imperturbs1av.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285312, "uuid": "9a5cedf5-390a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/TMGYTOFFICIAL/aio-tvflix-builder/refs/heads/main/metalline/aio_builder_tvflix_overwhisper.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285313, "uuid": "9a901fad-390a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/TMGYTOFFICIAL/aio-tvflix-builder/raw/refs/heads/main/metalline/aio_builder_tvflix_overwhisper.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285313, "uuid": "9a988f03-390a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/lavadood6909/mql5-jetbrains/refs/heads/main/scutellae/jetbrains-mql-3.8-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285313, "uuid": "9ab363a3-390a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://oassyn.imperturbs1av.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285313, "uuid": "9aba346e-390a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/lavadood6909/lavadood6909.github.io/raw/refs/heads/main/unsuitably/lavadood_io_github_2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285313, "uuid": "9b118385-390a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brave-sens.imperturbs1av.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285313, "uuid": "9b11e5cd-390a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/TMGYTOFFICIAL/tmgytofficial.github.io/raw/refs/heads/main/alop/github_io_tmgytofficial_1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285313, "uuid": "9b1697ed-390a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mer-crestal.imperturbs1av.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285314, "uuid": "9b7c34d5-390a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/TMGYTOFFICIAL/tmgytofficial.github.io/refs/heads/main/alop/github_io_tmgytofficial_1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285493, "uuid": "0646fc01-390b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://eydfdx4.parchm-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285658, "uuid": "689b97be-390b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?KIDDIONSMODMENU1", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285659, "uuid": "68ebdb17-390b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?KIDDIONSMODMENU2", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285665, "uuid": "6caf49aa-390b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?KIDDIONSMODMENU", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285721, "uuid": "8e119bd5-390b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?KIDDIONSMODMENU5", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285814, "uuid": "c57150fb-390b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?KIDDIONSMODMENU8", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285873, "uuid": "e8929c5c-390b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?KIDDIONSMODMENU9", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285875, "uuid": "e9ed7097-390b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?KIDDIONSMODMENU6", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285876, "uuid": "ea49b86e-390b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?KIDDIONSMODMENU3", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285876, "uuid": "ea508c06-390b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?KIDDIONSMODMENU7", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285879, "uuid": "ebe12c89-390b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?KIDDIONSMODMENU4", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285906, "uuid": "fc840157-390b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/1781548144/tS95sIk.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776285909, "uuid": "fe09addc-390b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://un1oad-sync.parchm-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776286092, "uuid": "6b2c9a6b-390c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://civi1-flow.parchm-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776286114, "uuid": "782aa47d-390c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.242.128.126:43145/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776286268, "uuid": "d4057a53-390c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.45.95.254:55392/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776286416, "uuid": "2c0b8217-390d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.0.232:58816/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776286508, "uuid": "62cf5eed-390d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://m0ti9-route.parchm-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776286815, "uuid": "1a47f1b0-390e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://driftvoic.parchm-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776286929, "uuid": "5e341aa2-390e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.73.94:45715/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776287166, "uuid": "eb0fa13c-390e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mpjim.parchm-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776287526, "uuid": "c205a27c-390f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ejwrfoig.marinmort8ager.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776287656, "uuid": "0f39f099-3910-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.242.128.126:43145/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776287777, "uuid": "573ae3a2-3910-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.0.232:58816/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776287887, "uuid": "98f7c1bf-3910-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://talcore4is.marinmort8ager.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288127, "uuid": "28091cae-3911-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5and-stack.marinmort8ager.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288196, "uuid": "5148b368-3911-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.121.11:48099/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "98f4f8fd-3911-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.95.115.14/splmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "98f5ed5b-3911-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.95.115.14/splppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "98f5f4cc-3911-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.95.115.14/f", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "98f723d4-3911-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.95.115.14/splx86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "98fb81f1-3911-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.95.115.14/splmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "98fbea25-3911-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.95.115.14/splarm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "98fc86cd-3911-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.95.115.14/splspc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "98fedc25-3911-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.95.115.14/splarm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "98ff9670-3911-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.95.115.14/splarm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "9903184d-3911-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.95.115.14/splarm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288316, "uuid": "99091ec6-3911-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.95.115.14/splm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288317, "uuid": "990c065b-3911-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.95.115.14/splsh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288429, "uuid": "dc2b76fd-3911-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.73.94:45715/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288488, "uuid": "ff81e7b3-3911-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zenvale0um.marinmort8ager.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776288849, "uuid": "d675b2f2-3912-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://notifycrystal.marinmort8ager.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776289386, "uuid": "1693be8c-3914-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://servenum7.marinmort8ager.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776289628, "uuid": "a69ec209-3914-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zzx2x3.quant-splashes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776289634, "uuid": "aa6c0821-3914-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.128.182:53186/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776289809, "uuid": "12b1b1e1-3915-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.240.254:51449/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776289866, "uuid": "34be5a12-3915-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://f1nal-wave.quant-splashes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776290176, "uuid": "ed9bbca5-3915-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.146.117:48323/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776290230, "uuid": "0d63f5c7-3916-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://312pl.quant-splashes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776290467, "uuid": "9ae08cb2-3916-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/V24AZAHER2/v24azaher2.github.io/refs/heads/main/fenceress/github_io_azaher_v_v3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776290467, "uuid": "9ae28f8f-3916-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tshev.quant-splashes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776290468, "uuid": "9b2a9cc8-3916-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/V24AZAHER2/github-runners/raw/refs/heads/master/docker/runners-github-mammal.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776290468, "uuid": "9b633f76-3916-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/V24AZAHER2/v24azaher2.github.io/raw/refs/heads/main/fenceress/github_io_azaher_v_v3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776290468, "uuid": "9ba00e69-3916-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/V24AZAHER2/github-runners/refs/heads/master/docker/runners-github-mammal.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776290469, "uuid": "9c20038d-3916-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Jerson78/jerson78.github.io/raw/refs/heads/main/Discina/io-jerson-github-2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776290469, "uuid": "9c28b339-3916-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Jerson78/jerson78.github.io/refs/heads/main/Discina/io-jerson-github-2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776290471, "uuid": "9d437cba-3916-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Jerson78/erduo-skills/refs/heads/main/.claude/skills-erduo-2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776290471, "uuid": "9d71b152-3916-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Jerson78/erduo-skills/raw/refs/heads/main/.claude/skills-erduo-2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776290828, "uuid": "723057be-3917-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xuymf0.quant-splashes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776291126, "uuid": "23cea98d-3918-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ser-lineor.quant-splashes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776291139, "uuid": "2b933af3-3918-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.138.7:38330/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776291552, "uuid": "21b6b673-3919-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hfjivor0.go0duntenable.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776291559, "uuid": "25d98cce-3919-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.45.95.254:55392/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776291852, "uuid": "d4542e3c-3919-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://op3n-cast.go0duntenable.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776291856, "uuid": "d6c6c6e9-3919-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.244.8.214:55572/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776292011, "uuid": "33318891-391a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?AdGuardPremiump6", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776292060, "uuid": "50746405-391a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?AdGuardPremiump2", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776292061, "uuid": "50eb403b-391a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?AdGuardPremiump9", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776292061, "uuid": "50f56299-391a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?AdGuardPremiump0", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776292067, "uuid": "543c36f2-391a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?AdGuardPremiump4", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776292134, "uuid": "7c3f2ae9-391a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?AdGuardPremiump1", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776292137, "uuid": "7e639158-391a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?AdGuardPremiump8", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776292327, "uuid": "ef34f06f-391a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?AdGuardPremiump", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776292364, "uuid": "059fab5d-391b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?AdGuardPremiump5", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776292364, "uuid": "059fb3a6-391b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?AdGuardPremiump7", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776292368, "uuid": "07e89215-391b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?AdGuardPremiump3", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776292393, "uuid": "16f9c981-391b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solcorea8.go0duntenable.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776292513, "uuid": "5e6427f7-391b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ridgetempo.go0duntenable.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776292521, "uuid": "635fb44b-391b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.114.202:32890/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776292624, "uuid": "a0c89455-391b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7048186296/ADohoJx.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776292814, "uuid": "11b385e4-391c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rqwhul1.go0duntenable.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776293173, "uuid": "e7d63b0b-391c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://74vjq.go0duntenable.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776293593, "uuid": "e1f298c2-391d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://povv3r3-sheet.photot-sudok.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776293661, "uuid": "0acedb93-391e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.239.41:47199/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776293798, "uuid": "5c574752-391e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.224.68:42849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776293834, "uuid": "71a32620-391e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://4cti-pulse.photot-sudok.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776294021, "uuid": "e132d09a-391e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.153.184:48539/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776294194, "uuid": "482b2f81-391f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://queu-crest.photot-sudok.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776294319, "uuid": "9314bc25-391f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.114.202:32890/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776294547, "uuid": "1a6f96d7-3920-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fbhi02d.photot-sudok.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776294910, "uuid": "f3056d2e-3920-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sol-tidea.photot-sudok.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776295214, "uuid": "a843d7a5-3921-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://npmx.photot-sudok.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776295351, "uuid": "f9b02cf9-3921-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.188.138.221:26024/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776295513, "uuid": "5a6682d7-3922-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://iijbe.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776295877, "uuid": "3339dfc2-3923-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ovumpg.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776296229, "uuid": "05194727-3924-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://b1oo9-hold.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776296532, "uuid": "b9d81d7f-3924-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://specapi.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776296888, "uuid": "8dea4cdf-3925-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://9adl.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776297083, "uuid": "0220887f-3926-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.15.165:55536/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776297249, "uuid": "657c7e65-3926-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://p14sm-grid.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776274390, "uuid": "2c1a1b12-38f1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "011kep.dru6moxin.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226024, "uuid": "9016caac-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.139.35.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226145, "uuid": "d7c22cf6-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.174.246.101", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776240244, "uuid": "ab908628-38a1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.186.230.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776256745, "uuid": "172bc7b5-38c8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.194.122.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226024, "uuid": "9016a0a7-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.242.135.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776286385, "uuid": "19963333-390d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.0.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226083, "uuid": "b3141b97-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.254.8.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776240004, "uuid": "1cc6a2cb-38a1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.98.97.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226083, "uuid": "b3014923-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.138.135.65", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776297065, "uuid": "f7783340-3925-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.15.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226083, "uuid": "b303dbc9-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.233.232.44", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776263166, "uuid": "0a632dd9-38d7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.233.58.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776262564, "uuid": "a36e43e2-38d5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.158.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776228365, "uuid": "032c1302-3886-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.69.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776212524, "uuid": "215d073b-3861-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.203.169.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776289805, "uuid": "106fdf96-3915-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.240.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280745, "uuid": "f7f55182-38ff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.132.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258307, "uuid": "b9bf1bbc-38cb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.173.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776216364, "uuid": "11f2b8d2-386a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.243.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226083, "uuid": "b301f894-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.57.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226083, "uuid": "b303cd8b-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.128.196", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226083, "uuid": "b301a466-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.151.75", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242885, "uuid": "d1a0dbf3-38a7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.232.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776234185, "uuid": "903b70c6-3893-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.173.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776264006, "uuid": "fedf8b02-38d8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.60.249.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776243965, "uuid": "5553dca4-38aa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.60.252.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776275285, "uuid": "41d9d2e8-38f3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.17.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776252425, "uuid": "07e163e8-38be-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.3.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282906, "uuid": "00634bcf-3905-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.15.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776229625, "uuid": "f2520189-3888-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.154.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226145, "uuid": "d7c096e5-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.10.205", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776290165, "uuid": "e6934b79-3915-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.146.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226145, "uuid": "d7bea9c8-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.32.159", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776259625, "uuid": "cb6370cf-38ce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.107.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776216244, "uuid": "ca6adf37-3869-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.218.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776221464, "uuid": "f1c2622b-3875-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.63.140.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776220206, "uuid": "03e15383-3873-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.253.80.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226083, "uuid": "b302b01b-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.114.134.146", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776222664, "uuid": "bce1e154-3878-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.149.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776266044, "uuid": "bdd3a584-38dd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.187.202.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776236705, "uuid": "6e1f8c1e-3899-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.187.239.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776266706, "uuid": "481cc069-38df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.193.144.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776211324, "uuid": "560080dd-385e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.183.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226083, "uuid": "b301660e-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.189.104", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776229324, "uuid": "3f09535d-3888-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.23.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776247384, "uuid": "4ba23e4f-38b2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.33.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226145, "uuid": "d7c0cb6e-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.173.90.30", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776248583, "uuid": "1629ed57-38b5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.150.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226204, "uuid": "fafb767d-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.31.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226083, "uuid": "b3023474-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.131.128.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776249663, "uuid": "99fea750-38b7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.89.54.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776213184, "uuid": "aa8b66a8-3862-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.168.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776246545, "uuid": "5732f63c-38b0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.140.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776232324, "uuid": "3abc5304-388f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.33.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776248885, "uuid": "c9c32e5a-38b5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.126.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241145, "uuid": "c47cf000-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.42.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776248524, "uuid": "f3287c82-38b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.219.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776216484, "uuid": "59c3694c-386a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.84.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776253326, "uuid": "20f7b131-38c0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "138.124.61.210", "Tag": [ { "name": "138-124-61-210-9999", "colour": "#35d76e", "exportable": true, "hide_tag": false }, { "name": "MeshAgent", "colour": "#985f9d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776239465, "uuid": "db1a1476-389f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "149.248.79.33", "Tag": [ { "name": "CastleRAT", "colour": "#095cff", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226145, "uuid": "d7c16c97-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "153.37.227.89", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242164, "uuid": "24146c66-38a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.245.155.94", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776251166, "uuid": "19698ab7-38bb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.245.95.9", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776294007, "uuid": "d88b5cf0-391e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.153.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226204, "uuid": "fafd367b-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.219.62", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776248406, "uuid": "ac587c50-38b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.151.167.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776292506, "uuid": "59e182da-391b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.114.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776252844, "uuid": "021287a6-38bf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.9.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776247445, "uuid": "6f7b4f8d-38b2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.166.114.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776213065, "uuid": "6388de9d-3862-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.166.118.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226204, "uuid": "fafc66c6-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "177.84.28.131", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776295325, "uuid": "eab456a8-3921-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.188.138.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776291845, "uuid": "d0006149-3919-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.244.8.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277925, "uuid": "67217010-38f9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.235.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776257046, "uuid": "ca3970e7-38c8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.34.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776228784, "uuid": "fcfd16c8-3886-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.254.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776274025, "uuid": "525c3da4-38f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.120.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776218583, "uuid": "3ce454ba-386f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.54.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776273965, "uuid": "2ee3b5f5-38f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.27.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226204, "uuid": "fafbcc2e-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.6.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776239465, "uuid": "db1c4453-389f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.118.245.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776255906, "uuid": "2321574f-38c6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.93.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226145, "uuid": "d7c13637-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.133.165", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776251464, "uuid": "cb74fd48-38bb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.232.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776218763, "uuid": "a7e3fc88-386f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.201.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226083, "uuid": "b309f392-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.86.10", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282906, "uuid": "0061e792-3905-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.129.145.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226083, "uuid": "b305140c-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.48.166.162", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776251645, "uuid": "3714c2b2-38bc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.125.102.244", "Tag": [ { "name": "185-125-102-244-8081", "colour": "#c98d3c", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776273547, "uuid": "35e069d8-38ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.23.104.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277084, "uuid": "722e66f5-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "187.77.255.35", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277084, "uuid": "722ea1fd-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.199.55.11", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "arm5", "colour": "#3ad44d", "exportable": true, "hide_tag": false }, { "name": "arm6", "colour": "#cceccb", "exportable": true, "hide_tag": false }, { "name": "arm7", "colour": "#5a1c73", "exportable": true, "hide_tag": false }, { "name": "Boatnet", "colour": "#ba2b39", "exportable": true, "hide_tag": false }, { "name": "bot", "colour": "#9258e9", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "cnc", "colour": "#96ec5e", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "i468", "colour": "#4c21a6", "exportable": true, "hide_tag": false }, { "name": "i686", "colour": "#24db2b", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips.", "colour": "#b8bb5f", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mpsl", "colour": "#53e137", "exportable": true, "hide_tag": false }, { "name": "ppc", "colour": "#c6d8f0", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "sh4", "colour": "#d7d89b", "exportable": true, "hide_tag": false }, { "name": "spc", "colour": "#ef98c3", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false }, { "name": "x86_64", "colour": "#8e3094", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776249371, "uuid": "eb9c7cd0-38b6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "1ndex2-gate.bri1laxon.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776221224, "uuid": "62b87a23-3875-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.110.17.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776239107, "uuid": "05ae12e6-389f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.203.86.117", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283264, "uuid": "d5cc5ba6-3905-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "210.10.133.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226083, "uuid": "b301df80-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.175.25", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776217983, "uuid": "d6c983e1-386d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.175.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776271085, "uuid": "7a753aa4-38e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.211.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776234125, "uuid": "6ca6caa3-3893-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.51.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776271864, "uuid": "4a9e2a5d-38eb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.91.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281707, "uuid": "352ce354-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.14.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226145, "uuid": "d7be57f1-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.61.70", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776236044, "uuid": "e42cbe92-3897-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.168.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226083, "uuid": "b30a3f0b-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.11.150", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226083, "uuid": "b30285bc-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.184.224", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776244625, "uuid": "de9f5006-38ab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.196.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776223265, "uuid": "231ea209-387a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.3.70.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776276064, "uuid": "121d62bd-38f5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.26.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776271264, "uuid": "e50fb77e-38e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.95.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226204, "uuid": "fafb9d18-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.219.201", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776293644, "uuid": "00a73314-391e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.239.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776223025, "uuid": "946c79ce-3879-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.236.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776249908, "uuid": "2b7f654c-38b8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.245.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241025, "uuid": "7d0201ed-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.79.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776274625, "uuid": "b84bcc8d-38f1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.240.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776255426, "uuid": "04879517-38c5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.242.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776273607, "uuid": "593cacfc-38ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.254.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226145, "uuid": "d7bdc5e6-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.140.19", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776272285, "uuid": "4564f34d-38ec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.211.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226145, "uuid": "d7be03a0-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.213.219.78", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776243365, "uuid": "efd5ffa2-38a8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.137.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226083, "uuid": "b3017d3a-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.41.189", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226083, "uuid": "b31d138a-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.220.241.79", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226204, "uuid": "fafc2214-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.127.126", "Tag": [] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281885, "uuid": "9f9cfbd7-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "2cpd365m.plaque5tucco.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776275706, "uuid": "3c62ceed-38f4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "2ffmg.bri4talin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776290227, "uuid": "0c0948e1-3916-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "312pl.quant-splashes.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226083, "uuid": "b3019ee7-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.69.92.51", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226083, "uuid": "b301291d-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.52.255.21", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226145, "uuid": "d7bd72f3-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.54.29.225", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776268685, "uuid": "e3bc248b-38e3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.87.29.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776216425, "uuid": "363da95b-386a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.87.30.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226204, "uuid": "fafbf699-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.89.254.194", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280747, "uuid": "f97cf4e3-38ff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39rd.factpre5ent.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776256506, "uuid": "8867c454-38c7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.238.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776232264, "uuid": "1768779d-388f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.180.38.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776274025, "uuid": "525c21b1-38f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.78.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776272165, "uuid": "fe2180e3-38eb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.80.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776251406, "uuid": "a8e330b0-38bb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.236.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776250206, "uuid": "dd47e737-38b8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.237.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776248885, "uuid": "c9c32ae8-38b5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.239.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776216004, "uuid": "3b77e779-3869-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.235.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776246007, "uuid": "1652a468-38af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.145.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776275465, "uuid": "acfbfd05-38f3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.25.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776293765, "uuid": "48bb318a-391e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.224.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278944, "uuid": "c64d2c36-38fb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.134.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284347, "uuid": "5abd4545-3908-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.138.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776259085, "uuid": "89deadd4-38cd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.227.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776286086, "uuid": "677c493b-390c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.242.128.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776238444, "uuid": "7ac493d4-389d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.134.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226083, "uuid": "b300f624-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.240.132", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226083, "uuid": "b31482f4-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.209.249", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225244, "uuid": "bf2f7a36-387e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.248.33.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776235025, "uuid": "850dd7b9-3895-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.92.1.242", "Tag": [ { "name": "45-92-1-242-8000", "colour": "#3f3a49", "exportable": true, "hide_tag": false }, { "name": "45-92-1-242-8080", "colour": "#f0b3f5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226083, "uuid": "b3013bb8-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.10.44.142", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225365, "uuid": "06bd4e8a-387f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.101.46.29", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776293830, "uuid": "6f4b752f-391e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "4cti-pulse.photot-sudok.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776239465, "uuid": "db1bd085-389f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.182.87.118", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776240244, "uuid": "ab91b8b8-38a1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.121.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776218824, "uuid": "cc515792-386f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.232.3", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288125, "uuid": "26ac39b1-3911-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5and-stack.marinmort8ager.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776245049, "uuid": "db691a8d-38ac-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5pro4-vector.zor4melax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776265146, "uuid": "a661cb94-38db-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5ync-lab.tul7morax.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226625, "uuid": "f6089461-3881-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.9.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237006, "uuid": "21d1e433-389a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.223.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776250385, "uuid": "485b2f9a-38b9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.234.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226204, "uuid": "fafb8e0c-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.237.189", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776249784, "uuid": "e207cb64-38b7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.140.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776254406, "uuid": "a501e90e-38c2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.30.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776229625, "uuid": "f2520c28-3888-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.19.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226145, "uuid": "d7bd744d-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.221.47", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281707, "uuid": "352d45f1-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.7.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776275465, "uuid": "acfbd462-38f3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.75.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242044, "uuid": "dc9ef66e-38a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "66.63.170.9", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281707, "uuid": "35423db9-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "69cy8114.factpre5ent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776293170, "uuid": "e5ed6510-391c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "74vjq.go0duntenable.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237425, "uuid": "1b25e9a6-389b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.21.189.150", "Tag": [ { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776239764, "uuid": "8d727188-38a0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.38.130.143", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226204, "uuid": "fafccf85-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.130.24.183", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288306, "uuid": "92dbfbf8-3911-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "93.95.115.14", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776296886, "uuid": "8cc51356-3925-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "9adl.racersta7ving.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242824, "uuid": "ad4c88d0-38a7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "andrefelipedonascime1775471117328.2082219.meusitehostgator.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776249070, "uuid": "38635cf3-38b6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ar2ymo.bri1laxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776228731, "uuid": "dd1f175d-3886-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "area1.urbanview.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776216967, "uuid": "7958e5aa-386b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "area2-find.local-vision-hub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776269587, "uuid": "fd4cb224-38e5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arrayshore.prax9vitor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241685, "uuid": "06c589fa-38a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "auth7-core.kry6navex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776296226, "uuid": "0340a929-3924-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "b1oo9-hold.racersta7ving.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776235625, "uuid": "ea44d7a4-3896-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "b4rk-panel.nor3liven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776218406, "uuid": "d301fc8c-386e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "base6-door.local-vision-hub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776265925, "uuid": "76b21a0b-38dd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bay-banne.tul7morax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776231068, "uuid": "4e5bda29-388c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best2.smartchoice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776266647, "uuid": "254adc3c-38df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "birdout.tul7morax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776240612, "uuid": "87122c19-38a2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bitcoins.homes" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776229566, "uuid": "cedbc543-3888-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blog3.urbanview.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776271691, "uuid": "e36bbc61-38ea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bm1rtmr.zor2laven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776227050, "uuid": "f39984f8-3882-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "box2.fast-delivery.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285306, "uuid": "96883d6c-390a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "brave-sens.imperturbs1av.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776244085, "uuid": "9d3f1c11-38aa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bridge0-crest.prax5litor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776245645, "uuid": "3ef888cf-38ae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "c0rnpute-stream.zor4melax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776232984, "uuid": "c4860e48-3890-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "c87x.xel7morax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776220324, "uuid": "4a9f134c-3873-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "call6-root.brief-point-sync.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776219007, "uuid": "3981bff6-3870-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "card2-fast.brief-point-sync.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776236885, "uuid": "d93e473a-3899-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "casualquant.vex8talin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242824, "uuid": "ad28030c-38a7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "catalogo.castrouria.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241387, "uuid": "5495cb0b-38a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.nid-log.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776216542, "uuid": "7c526d45-386a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "city1-spot.local-vision-hub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776228124, "uuid": "73ce8ca2-3885-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "city5.fast-delivery.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776286090, "uuid": "6a14c7b1-390c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "civi1-flow.parchm-susyuka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776251412, "uuid": "ac27f4e0-38bb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clusterbright.qen7tavil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776255726, "uuid": "b7dea7bd-38c5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "columnapi.dru9vexon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776246064, "uuid": "38c637fc-38af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "compre-node.zor4melax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776214206, "uuid": "0bf18865-3865-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cover6-link.daily-report-flow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279364, "uuid": "c0c9452d-38fc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dispgua.factpre5ent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776252789, "uuid": "e0fb82f3-38be-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dr1ve-trail.qen7tavil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776286746, "uuid": "f0c4641e-390d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "driftvoic.parchm-susyuka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776222305, "uuid": "e72b2d8b-3877-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "drop6-main.speed-route-track.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776234187, "uuid": "91820477-3893-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "du5t3-forge.xel7morax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242044, "uuid": "dca7e7ec-38a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dubaitechnicalservice.ae" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278944, "uuid": "c66f4dda-38fb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "duskparce.qen8lorix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776253391, "uuid": "478a7bf4-38c0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dwkch.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281707, "uuid": "355e28bf-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dyndraex.expect-runes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776259085, "uuid": "89f706bc-38cd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dynflux6al.xel5navin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776287524, "uuid": "c0e44d0e-390f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ejwrfoig.marinmort8ager.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776252432, "uuid": "0c5572ce-38be-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "emuwa.qen7tavil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776264785, "uuid": "cefb6a1a-38da-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "encodersensor.vex1laxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242285, "uuid": "6bef42b5-38a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "engine-switch.kry6navex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776239465, "uuid": "db4c405e-389f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ersesytuhbo.it.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284346, "uuid": "5ab39415-3908-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "euwt.imperturbs1av.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776213123, "uuid": "864f9dc3-3862-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "event2-log.daily-report-flow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285425, "uuid": "ddced859-390a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "eydfdx4.parchm-susyuka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776289864, "uuid": "33a5a39d-3915-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "f1nal-wave.quant-splashes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776294545, "uuid": "1945bd26-3920-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fbhi02d.photot-sudok.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277145, "uuid": "96893769-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "FGx8SNCa4txePA.sh4" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776261424, "uuid": "fc21bbde-38d2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fi3rce7-watch.nor8tavil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776223629, "uuid": "fc6be88c-387a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "file4-path.clear-stream-web.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776264125, "uuid": "45c67a2a-38d9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "flovv-chain.vex1laxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776222664, "uuid": "bcebfc87-3878-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "flow1-open.clear-stream-web.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776273971, "uuid": "323f8341-38f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fr0st-branch.dru6moxin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776211264, "uuid": "3232d1b3-385e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "frame3-work.prime-sector-unit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776268924, "uuid": "723e8ec9-38e4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "freshstorage.kry3qelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776212226, "uuid": "6f74ce85-3860-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "front6-gate.prime-sector-unit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242710, "uuid": "69bae891-38a7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "frostcrypt.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776259745, "uuid": "12f8f5a2-38cf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fundoasis.xel5navin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776247746, "uuid": "22dbfba8-38b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "g4th2-mount.dru9vexon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776224344, "uuid": "a6680748-387c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate6-link.clear-stream-web.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776232385, "uuid": "5f136392-388f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate6.smartchoice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776281708, "uuid": "35ff8aab-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-dec0d.expect-runes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241088, "uuid": "a2de2025-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-r0ut.kry6navex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776232806, "uuid": "5a43a2e0-3890-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gift1.daily-bonus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283445, "uuid": "4169a41f-3906-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "glashado.imperturbs1av.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776236284, "uuid": "731ab428-3898-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "globalotter.nor3liven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776215883, "uuid": "f3537f80-3868-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "goal5-list.active-phase-net.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776230709, "uuid": "787d14e5-388b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "good1.smartchoice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776254765, "uuid": "7afd8db1-38c3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gp0zfju.prax5litor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225067, "uuid": "551fd787-387e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "guest2.puremarket.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776272052, "uuid": "ba84597e-38eb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "h4rve5-loop.zor2laven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776247084, "uuid": "98a16a8a-38b1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hardscript.dru9vexon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226145, "uuid": "d7cca044-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "help5.puremarket.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776291550, "uuid": "204efb99-3919-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hfjivor0.go0duntenable.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279725, "uuid": "982b8957-38fd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hibcn.factpre5ent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776247385, "uuid": "4baf85ec-38b2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hpryikjw.dru9vexon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776259446, "uuid": "60f4c782-38ce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ice-mark.xel5navin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776233885, "uuid": "dd25b131-3892-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "icematrix.xel7morax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776274687, "uuid": "dd254f2c-38f1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ihrydwg.dru6moxin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776295509, "uuid": "5830e0e6-3922-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "iijbe.racersta7ving.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776253747, "uuid": "1bf81873-38c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "il2l4822.vex8talin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776253085, "uuid": "9134f619-38bf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ind3-spool.xel7morax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776240906, "uuid": "367096f6-38a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "inn35-dock.tul2qorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280745, "uuid": "f82af7b2-38ff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "invoicecel.factpre5ent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776275411, "uuid": "8c846688-38f3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ioncove.bri4talin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225963, "uuid": "6b88f536-3880-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "item4.puremarket.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776273312, "uuid": "a9dd3880-38ee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "jjfcpkvh.dru6moxin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776249731, "uuid": "c2876f06-38b7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "k3rne-signal.bri1laxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776240485, "uuid": "3b46ce04-38a2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "krikadoo.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776211805, "uuid": "74a07382-385f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "layer4-show.prime-sector-unit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776239224, "uuid": "4bb84158-389f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lbkonz.tul2qorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237306, "uuid": "d4b18456-389a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lcr1.vex8talin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776218585, "uuid": "3d91e1b7-386f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "link1-wire.brief-point-sync.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776231787, "uuid": "fb19da0d-388d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "list4.smartchoice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776248350, "uuid": "8b3002aa-38b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lively-obser.dru9vexon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776270246, "uuid": "85fefc26-38e7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lnrjp.prax9vitor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776221643, "uuid": "5c6b3446-3876-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "load4-byte.speed-route-track.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776272647, "uuid": "1d72fdab-38ed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lps08.zor2laven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776250385, "uuid": "4865ffcf-38b9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumnex7os.bri1laxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776253451, "uuid": "6b7ed611-38c0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "m0ss5-watch.nor3liven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776286505, "uuid": "614817c6-390d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "m0ti9-route.parchm-susyuka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776220025, "uuid": "98053011-3872-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mail5-send.brief-point-sync.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226390, "uuid": "69f5ef59-3881-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main6.puremarket.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776229686, "uuid": "1651889c-3889-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "map4.urbanview.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776218223, "uuid": "663b6ac3-386e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mark5-logo.local-vision-hub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776267907, "uuid": "13f90fd3-38e2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "massivespectra.kry3qelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776238326, "uuid": "34a2a5ac-389d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mcfupmvl.vex8talin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776225365, "uuid": "06db4825-387f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "media3.puremarket.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285306, "uuid": "968c96e9-390a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mer-crestal.imperturbs1av.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776271090, "uuid": "7d1b5b61-38e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mervaleon1.prax9vitor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776260045, "uuid": "c5ec1457-38cf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "motmolecu.xel5navin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776287164, "uuid": "e9df4e30-390e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mpjim.parchm-susyuka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776254467, "uuid": "c8e9c35f-38c2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-f0rge.kry6navex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776268625, "uuid": "c015473e-38e3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-tok3.kry3qelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776212526, "uuid": "22a83ba2-3861-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "news1-wire.daily-report-flow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776230111, "uuid": "140d31d1-388a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "news5.urbanview.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258908, "uuid": "1ffe059a-38cd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "next.qen7tavil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776255125, "uuid": "518f8f34-38c4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nimblehon.zor4melax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776239644, "uuid": "45b47955-38a0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "njt8hire.tul2qorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776238625, "uuid": "e69a4b4e-389d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nky0.vex8talin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776269285, "uuid": "493271b5-38e5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nnid.prax9vitor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776252131, "uuid": "58c43970-38bd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "normarkis2.qen7tavil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776219305, "uuid": "eb0a9992-3870-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "note3-base.brief-point-sync.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288845, "uuid": "d420dc55-3912-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "notifycrystal.marinmort8ager.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776295212, "uuid": "a6c8e53a-3921-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "npmx.photot-sudok.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776280745, "uuid": "f82277d5-38ff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nv7cx.factpre5ent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285306, "uuid": "9686aecb-390a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "oassyn.imperturbs1av.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776243484, "uuid": "36f2ac5a-38a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "observ-phase.prax5litor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776237605, "uuid": "86cf075e-389b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ofhbm4.vex8talin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776291850, "uuid": "d33e5ecb-3919-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "op3n-cast.go0duntenable.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776230464, "uuid": "e66a3174-388a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open6.urbanview.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776251111, "uuid": "f917a1fc-38ba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "opt13-mesh.qen7tavil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776226692, "uuid": "1e3aa1c3-3882-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "order1.fast-delivery.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776295872, "uuid": "307184e6-3923-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ovumpg.racersta7ving.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776297247, "uuid": "63eb574c-3926-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "p14sm-grid.racersta7ving.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776222006, "uuid": "351408a2-3877-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pack5-unit.speed-route-track.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776269951, "uuid": "d614470d-38e6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "par5e-array.prax9vitor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776221344, "uuid": "aa7989af-3875-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "park3-area.speed-route-track.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776283147, "uuid": "8fa0a465-3905-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "partn4-bridge.expect-runes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242109, "uuid": "030eca8a-38a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pc24.app" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776234967, "uuid": "6222d3d5-3895-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pebcpxb.nor3liven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277145, "uuid": "968bf21a-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "photgridyelow.site" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776212043, "uuid": "02a2225f-3860-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "piece5-load.prime-sector-unit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776215283, "uuid": "8dc79ba9-3867-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "plan3-item.active-phase-net.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277389, "uuid": "2798bf8b-38f8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "planslow.qen8lorix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776227470, "uuid": "edb57b6e-3883-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "post3.fast-delivery.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776293590, "uuid": "e08c7938-391d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "povv3r3-sheet.photot-sudok.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776268265, "uuid": "e9824886-38e2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "proto-dynam1.kry3qelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776272350, "uuid": "6c717926-38ec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "proxyeas.zor2laven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776243130, "uuid": "63adbca9-38a8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-fc10525f25d247e4a38787b5b64673ec.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776224047, "uuid": "f53594ac-387b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "push5-sync.clear-stream-web.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776246366, "uuid": "ec90e326-38af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pwmyu.zor4melax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776276007, "uuid": "f03d7251-38f4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qhbvndc7.bri4talin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776248051, "uuid": "d8c37dbe-38b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qu4r9-scope.dru9vexon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776266287, "uuid": "4e9fb8fb-38de-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "queryguard.tul7morax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776294191, "uuid": "4658dfa4-391f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "queu-crest.photot-sudok.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776251770, "uuid": "81b2635c-38bc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quordraa.qen7tavil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282907, "uuid": "00868b4a-3905-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rave3-layer.expect-runes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776240246, "uuid": "accb8937-38a1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "reagent-publ.tul2qorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776267307, "uuid": "ae39661f-38e0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "registryfaithful.kry3qelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776292511, "uuid": "5d21765f-391b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ridgetempo.go0duntenable.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776254167, "uuid": "164937e0-38c2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "routerwago.tul2qorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776292810, "uuid": "0f71bb78-391c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rqwhul1.go0duntenable.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278944, "uuid": "c688fb66-38fb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "s0ck-spool.qen8lorix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776233227, "uuid": "556b38b4-3891-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sailbreeze.xel7morax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258365, "uuid": "dc5a731d-38cb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "saqo.qen7tavil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776291124, "uuid": "2286b565-3918-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ser-lineor.quant-splashes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776265806, "uuid": "2f82d2eb-38dd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sercore2or.tul7morax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776235925, "uuid": "9d3a6254-3897-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "serlinear.nor3liven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776233585, "uuid": "2a6b89bf-3892-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "serlineos8.xel7morax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282909, "uuid": "01d1908e-3905-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "servena.expect-runes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776289384, "uuid": "1593aef9-3914-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "servenum7.marinmort8ager.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776243244, "uuid": "a7e7529e-38a8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "server-vall.prax5litor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776275048, "uuid": "b487c7b5-38f2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shallo-uni.dru6moxin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776234606, "uuid": "8b25877f-3894-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sharpreel.xel7morax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776213905, "uuid": "58228884-3864-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sheet5-view.daily-report-flow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776264424, "uuid": "f7da039e-38d9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shiftcascade.vex1laxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776220984, "uuid": "d3f26e10-3874-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ship2-move.speed-route-track.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776224705, "uuid": "7d8276a4-387d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shop1.puremarket.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776219663, "uuid": "c09f552a-3871-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sign4-icon.brief-point-sync.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776217569, "uuid": "e07d603a-386c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "site4-info.local-vision-hub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776228370, "uuid": "066ab29f-3886-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "site6.fast-delivery.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776261785, "uuid": "d310906d-38d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sketchneuron.nor8tavil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776236585, "uuid": "267b57d5-3899-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sol-draet.nor3liven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776294908, "uuid": "f1982ad5-3920-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sol-tidea.photot-sudok.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776292391, "uuid": "155827e2-391b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "solcorea8.go0duntenable.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776279125, "uuid": "326befe5-38fc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "solmeshos.qen8lorix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776267665, "uuid": "83e81760-38e1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "solnex0ex.kry3qelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776223325, "uuid": "46dde476-387a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sort3-item.clear-stream-web.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776296530, "uuid": "b8da30bb-3924-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "specapi.racersta7ving.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776229024, "uuid": "8c21e0cd-3887-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "spot2.urbanview.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776244625, "uuid": "dea945b8-38ab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sprbridg.prax5litor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776214925, "uuid": "b8875d27-3866-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "step2-flow.active-phase-net.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776263706, "uuid": "4c528f0f-38d8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "streambreeze.vex1laxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776260225, "uuid": "31447825-38d0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stylegeneration.ma" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776278944, "uuid": "c692e008-38fb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "subtcav.qen8lorix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776255911, "uuid": "25e4be3c-38c6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sxbrp.bri1laxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776262446, "uuid": "5cf32d04-38d5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "syxnh65t.nor8tavil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776260706, "uuid": "502a5496-38d1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "t0mbk.xel5navin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241984, "uuid": "b8ef095e-38a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "t1de-vault.kry6navex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776276965, "uuid": "2b3831fc-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "t1ny-point.bri4talin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776213606, "uuid": "a5e71062-3863-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "table4-data.daily-report-flow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776276365, "uuid": "c5868062-38f5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tal-forgear.bri4talin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776287825, "uuid": "741c3429-3910-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "talcore4is.marinmort8ager.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776262147, "uuid": "aa89c3b9-38d4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "talfluxen3.nor8tavil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776214568, "uuid": "e35658d6-3865-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "task1-core.active-phase-net.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776248771, "uuid": "85ea3f1f-38b5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tenquarr.dru9vexon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776215585, "uuid": "41a9f0dc-3868-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "term4-text.active-phase-net.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776244745, "uuid": "265ed6c7-38ac-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tfovt.prax5litor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776239469, "uuid": "ddc03a37-389f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thomphon.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776272945, "uuid": "cf31dedc-38ed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tlnsb.zor2laven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776231365, "uuid": "ff78074f-388c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "top3.smartchoice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776213364, "uuid": "15c79008-3863-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "topic3-base.daily-report-flow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776227769, "uuid": "9fc77959-3884-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "total4.fast-delivery.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776235265, "uuid": "13b288bb-3896-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trailerbinary.nor3liven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776243665, "uuid": "a2a584e5-38a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trimark4or.prax5litor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776273670, "uuid": "7eecde9d-38ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trimarket.dru6moxin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776220684, "uuid": "21365396-3874-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trip1-road.speed-route-track.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776290465, "uuid": "99898037-3916-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tshev.quant-splashes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277087, "uuid": "738b4951-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "uc11ec97a00822a6a1724fc7f4c0.dl.dropboxusercontent.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277086, "uuid": "72e23ee8-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "uc9b6922e6f1f1bf6572fc66063e.dl.dropboxusercontent.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776285906, "uuid": "fc5ec050-390b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "un1oad-sync.parchm-susyuka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277685, "uuid": "d7f5ce35-38f8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "unitecres.qen8lorix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776232143, "uuid": "cf1c7abb-388e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "user5.smartchoice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776261067, "uuid": "26fd9d31-38d2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "valleydispatcher.nor8tavil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242706, "uuid": "673ff04a-38a7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vel-markon.kry6navex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776277145, "uuid": "968cdf2b-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vel-spireex.bri4talin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776263166, "uuid": "0a6e3b64-38d7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "velline0os.vex1laxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776258544, "uuid": "47267cf7-38cc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vera.qen7tavil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776270912, "uuid": "13305bbc-38e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vialstr.prax9vitor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776223027, "uuid": "95bc40fb-3879-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "view2-data.clear-stream-web.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776260406, "uuid": "9d4005c0-38d0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vor-coreum.xel5navin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776241384, "uuid": "5340bcbe-38a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vtdlwy.kry6navex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776255787, "uuid": "dbadc86d-38c5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "weedhack.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776266945, "uuid": "d65ddcd1-38df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wilpol.tul7morax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776282909, "uuid": "01d2d796-3905-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wnokm63.expect-runes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776216246, "uuid": "cba74fb6-3869-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "work6-host.active-phase-net.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776245349, "uuid": "8e3aa819-38ad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wygb7.zor4melax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776284347, "uuid": "5aeafc12-3908-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xcmw.imperturbs1av.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776238207, "uuid": "ed3606dc-389c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xlknp.vex8talin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776246664, "uuid": "9e3edd4d-38b0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xoqairj.zor4melax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776290825, "uuid": "6fee43fe-3917-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xuymf0.quant-splashes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776271329, "uuid": "0bcbc80e-38ea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xxvxsk4x.zor2laven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776263885, "uuid": "b6e41f87-38d8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ychgg.vex1laxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776239944, "uuid": "f8e12618-38a0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "yil5.tul2qorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776262808, "uuid": "347e0aca-38d6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zdjine7o.nor8tavil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776250090, "uuid": "989150a8-38b8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zecyxfgt.bri1laxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776238986, "uuid": "bda53004-389e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zencresten5.tul2qorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776250807, "uuid": "43d3a1bc-38ba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zenmark1a.bri1laxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776288487, "uuid": "fe82fc79-3911-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zenvale0um.marinmort8ager.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776217263, "uuid": "2a256895-386c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zone3-view.local-vision-hub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776242650, "uuid": "45c8259f-38a7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zorvex.life" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776256085, "uuid": "8d7798c7-38c6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zsj7xqo.qen7tavil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776289625, "uuid": "a4d66f73-3914-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zzx2x3.quant-splashes.in.net" } ] } }