{ "Event": { "published": true, "date": "2026-02-21", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-02-21", "timestamp": 1771719322, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "0aca6369-fb21-4fb6-9bd5-a8ea9069bf2a", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1771633033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771633033, "uuid": "8b5edd1a-d2d1-49e6-ab0f-848312b21d94", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771633033, "uuid": "5c076924-566a-4810-9dd4-8d8761d1168c", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771633033, "uuid": "f87ed2af-66c9-4276-a989-e8844fe4c5d4", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771633033, "uuid": "34d06a3c-0ce0-43f0-b201-6ae1ae96760b", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771633033, "uuid": "bc58868e-96eb-4c67-b25f-d5671357b13a", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f463e8fe-0ebf-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771635302, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771635302, "uuid": "90d02393-c7fe-4a52-85d4-a6bf3505f0fb", "comment": "Malware payload (Mirai)", "value": "c2b7b3e6f1970ebfe9c3321c62b5ffc6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771635302, "uuid": "5762884f-3e8a-4f4d-8f85-eab20e755f4b", "comment": "Malware payload (Mirai)", "value": "50e5d0ed3add7b69ece37ecf0bbdd32206eb632085bb55cc8360727587e59f36", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771635302, "uuid": "7f4eac52-d9d2-4d77-b6bd-a580c3d23ae8", "value": "T10C156B1BA2B374BDC157C43443ABCAB3A935B43902226E7B65C4D6303E27E701B59B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771635302, "uuid": "b1a9e589-d6d2-4209-98c9-e9dd8ebb3c84", "value": "24576:iQuk54sJkd/XmWz1OFut4NL/iDnDpGW+:iQuk54sJk5JJtacYW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771635302, "uuid": "d6d496f9-3d60-429b-abad-2b52689c896a", "value": 887688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771635302, "uuid": "6c447e01-b561-4e8c-9591-3e41f2dcf228", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b981eb6a-0ec0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771635633, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771635633, "uuid": "76b29552-afbf-4da1-a597-d667eca20f86", "comment": "Malware payload (Mirai)", "value": "aaa6e1bca8d70e58d33345dc7a5c8ee9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771635633, "uuid": "c66ba821-ac76-4148-9f61-f4a448c149dd", "comment": "Malware payload (Mirai)", "value": "b42613b93959fb44ffbf338258649664c870902d5bd087243107269e9523b8d5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771635633, "uuid": "969bbadf-d94d-4b9e-934d-4e84c1b2e2fb", "value": "T1BE964B37B6A285DCC08BE1746A9FD5F3F920B4F40221206B27965A367F36E900F6D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771635633, "uuid": "735285fc-2d3d-436d-99eb-a5107f8fab9c", "value": "196608:QNlusYpHZPaU8ZlgoHOdWPV8ZU3h/KrUb+Hs:QNlu/xaU2993h/KrR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771635633, "uuid": "234ad0af-e334-43d2-b0d8-8cfc7f578c63", "value": 9430488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771635633, "uuid": "b40f800c-5b55-43a0-bcb8-c855c34536fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771635732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771635732, "uuid": "3c59b17a-81b7-4e6f-8fb9-61cb59769db6", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771635732, "uuid": "c067ad75-5e2e-406a-ab3d-e3bb78ba0f4f", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771635732, "uuid": "4c5e2e19-e733-476a-bf7a-7a38c8a89469", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771635732, "uuid": "148e0a13-266b-4c2b-93d5-6c2815e59a79", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771635732, "uuid": "b8e74c6c-bf63-4f73-92d0-d6f3aea6f782", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6feadc9-0ec2-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771636515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771636515, "uuid": "0ed58934-14c3-4c96-9196-9ae88830c263", "comment": "Malware payload", "value": "37e6aa42ec8ffcea66b7a2e2f177be70", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771636515, "uuid": "3589f576-15b3-447f-ab6e-3e87f5958cf2", "comment": "Malware payload", "value": "887ad96646391c2cd7ad566d198802fe200ecc094653a15802d4e3414e01a38c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771636515, "uuid": "ee8245da-1642-403b-a6ef-98b1c9e6bce9", "value": "T10E8308327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771636515, "uuid": "c98ef92b-6606-4606-b21e-2942985f03c0", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnIWaUVN/:XEKltp9txAX/yr2pbIW5VN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771636515, "uuid": "f5e7b115-8080-461d-99a4-203220fcf8e2", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771636515, "uuid": "3359f417-728d-4385-b13b-fe69b6cbb7d5", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1771637346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771637346, "uuid": "1952dc56-cf8c-47bb-86fb-7e180f8d1cff", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771637346, "uuid": "38d26a3b-c13e-4c18-b26e-176555ff0ad0", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771637346, "uuid": "829abbef-61d1-43f3-84fb-541881fca995", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771637346, "uuid": "f389bf3a-7b73-4931-8ce9-c97b357c9224", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771637346, "uuid": "344f5c6f-401a-42ab-80d2-8d073ad7e5af", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d41f77a-0ec5-11f1-8369-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1771637572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771637572, "uuid": "62f84cc2-f80c-49ee-a4ac-d2e07ff3dd11", "comment": "Malware payload (GCleaner)", "value": "3a601fdc58af52b997168b686c537c6e", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771637572, "uuid": "dbb570a8-31d2-4f75-8825-a7c69baa15fc", "comment": "Malware payload (GCleaner)", "value": "6eac8fcff7aa0c2620c031d2a9cd7f0adaa477b831f1ff9bbda4303415fcec07", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771637572, "uuid": "d10c5d49-f2eb-4ef8-ae22-57d765b09a6c", "value": "T147F49E25E5E84C33F5321E78DC3BE25598297A906D2868C93AE41CC8CF3A39275E5D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771637572, "uuid": "551c1b2e-34c4-40da-9dd8-0a0a6122f276", "value": "c475b6e242f56325f64c2b76233f720b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771637572, "uuid": "ba9ca284-f69b-490a-a38d-47c0fbcd5e86", "value": "12288:6eM9gzhW/BsjB7V+bRO88pvnhUk1Zy4iYoXJS5wyOgS:dK3/q7gR8919KJSN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771637572, "uuid": "31ee4ec2-2fc8-4674-9e46-5428c4a98550", "value": 758784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771637572, "uuid": "ca8856d0-f35f-44f2-a0f1-55dd47166a37", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b00d376-0ec5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771637676, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771637676, "uuid": "09043c14-9b54-4079-b805-35a3c8063bc1", "comment": "Malware payload", "value": "464a8392ed03ebbb03c2fd9122e6905d", "object_relation": "md5", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771637676, "uuid": "b848b7cc-fd96-48e6-ade1-b47c6b16765b", "comment": "Malware payload", "value": "df29673a520423aa0af9535754aafdbe4a154d63827d10dbc1d87d733abf173e", "object_relation": "sha256", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771637676, "uuid": "0a2809cc-736b-48ae-be71-bc8aec50ae41", "value": "T14696024A052135E72C08BCE94C06D4FA9DBA104F97DF211CBFF69AFEF139989C9059", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771637676, "uuid": "839fb3f4-eb71-4001-8857-bcfc9da5eac9", "value": "96:9SJSJSJSJSJSJSJSJSJSJSJSJSJSJSJSJSJSJSJSJSJSJSJSJSJSJSJSJSJSJSJk:rf+oRiO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771637676, "uuid": "4ddd9df5-dfb4-44c0-a396-56b57eb0872d", "value": 9277629, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771637676, "uuid": "e208851f-62d5-4b96-a333-1e5844baf0cb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42aff16c-0ec6-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771638011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771638011, "uuid": "4809ea84-fbcc-40fa-aaba-76335147328c", "comment": "Malware payload (Mirai)", "value": "b39e0793e3d1db42bd7755486fdf6b1a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771638011, "uuid": "6e277556-7f64-4110-b2ba-8c330105199d", "comment": "Malware payload (Mirai)", "value": "d5d6d5c867bc4b934e351ced88c83b8be1ac9e7c8922424e4ad6abd05b77ecf0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771638011, "uuid": "9a59abad-bc45-4994-a352-1d42bfcf0344", "value": "T14A157C99E787E4E1F52304F0025FDBF64674A12A4013FAF6FF492A6274327616F1A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771638011, "uuid": "580862c0-0f33-4b85-b27e-2a3073418a1c", "value": "12288:iyZPhW5/aiAhYSh0/NxJQbZFUsd0F9z7G3KGsODagtup+p39RPyA/zzNWxkKGLu:LZPhWVa5hYShuQTUVF9XqNhDvIM91dc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771638011, "uuid": "29ece007-7569-421a-bc10-d8b6e388e49d", "value": 915704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771638011, "uuid": "d3ca2f50-38a1-4b70-b5dd-217db8359838", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771638075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771638075, "uuid": "ddd59520-af22-4da5-810d-d11946300ef3", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771638075, "uuid": "9e8f3e04-60c6-4d72-8a7c-7293ebf3d2dd", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771638075, "uuid": "ebbd138f-9261-4723-9709-befee765f226", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771638075, "uuid": "b4b67cc1-1343-4eea-a0c0-819c173f895c", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771638075, "uuid": "e1880c63-d665-4575-8924-4d07dc6c9b27", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9b60f47-0ec6-11f1-8369-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1771638318, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771638318, "uuid": "edf3f9d2-40c1-4bfa-8df4-23f5ba11911f", "comment": "Malware payload (CoinMiner)", "value": "5059b45c08e23bbfae10f3185c9ab692", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771638318, "uuid": "ea429b5f-c64e-4785-9a23-cb119f0f2468", "comment": "Malware payload (CoinMiner)", "value": "43b9cfbfd524d138da3312b47fcee8c4c9ab9343d89fe7b4b730f73c940fbfef", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771638318, "uuid": "0b3c2455-23a7-41ab-b4ef-00728b4bf561", "value": "T121B6BE15A3E901B1D877CA30CA66C733CAB17D965A35C50F0658F2522F73D628BAF3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771638318, "uuid": "e235d5ea-6f1f-4884-836e-aa3ffb433c8e", "value": "324a475069966de421cdd2985bf9bffd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771638318, "uuid": "3468fdf9-0117-455c-9ee1-96efe179851c", "value": "98304:EMxkkp1jRdsu1UNIfezt/jb2Q37VnuGknpr77FM59H91gqHstaanWLv:EJgjjsu1UAw/jbx7AGkpzizd1VoaJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771638318, "uuid": "3737207d-4d22-4e6a-a3c2-f1880d1e2750", "value": 10573053, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771638318, "uuid": "7bc844a2-b66b-4f1a-9783-3d5141f643b9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5396c327-0ec7-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771638468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771638468, "uuid": "e06f32c2-6afa-496b-b27d-5e8a8333145f", "comment": "Malware payload", "value": "748d5aafe2942434c94f7c1eb147b7c2", "object_relation": "md5", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771638468, "uuid": "9890410f-76f5-4e4d-bc02-927b962010eb", "comment": "Malware payload", "value": "3900679b2bce1b92de23a706375d2fe0ebcf87dcd4bd50f02ce53d29a85d0369", "object_relation": "sha256", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771638468, "uuid": "e554ddbe-c87b-410e-8510-9aabc0d9b8d7", "value": "T10786227990811266BDEEC1F4676367F0CACE786E6B55C4AD278A31C839030DBDD490", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771638468, "uuid": "48ccdcbf-2bf1-4d9b-80d5-b7679e69cea9", "value": "768:yHDKT/F8QooPly90mmYflHhX9x1ZcBWHFLG37qFS4pDjZLMfTHlV7yP+H:xH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771638468, "uuid": "1d222ed2-0b7b-4751-a1f5-ddd1a18ea4ab", "value": 8296748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771638468, "uuid": "df03ced5-1e2b-44ea-9a48-7fcda03352f0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12138631-0e31-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771640347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771640347, "uuid": "5a02ec9a-d28b-4e2b-a24e-e04d0ed56c83", "comment": "Malware payload", "value": "d36cd55c85ed93a9946d5f7bdcd6e4d2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771640347, "uuid": "53cd84a2-8372-4bad-b230-4e16b5c69e50", "comment": "Malware payload", "value": "8f5a2b047d41915a06c648148a1e96eb4bc9a888b9b57b61dd05c9eca16fe119", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771640347, "uuid": "b91bc996-4f04-42eb-a5ed-ccf95399b44a", "value": "T160B5CF765207BCFADB675E7CD1022A710C887C671B2185CCBACA07CAA1D558CDFB98", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771640347, "uuid": "cab7ce1b-8acb-47fe-86ae-33d7e947f29e", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cGN3eOfh11YYGBY:8UixbItdTrJoFVPMvXGNHi5c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771640347, "uuid": "339ec30b-63a4-4e82-88d9-3703596d0f42", "value": 2384048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771640347, "uuid": "a066c417-5b0c-4971-8f43-af23bf015082", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e4765ea-0ecc-11f1-8369-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1771640741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771640741, "uuid": "2fc7e54f-0f74-43d9-bf7d-d268f17c658f", "comment": "Malware payload (Smoke Loader)", "value": "4f415e71afd25fdd910f9afe542d4308", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771640741, "uuid": "7ffdb74c-77a6-441f-8fdd-4dbfdede7bc1", "comment": "Malware payload (Smoke Loader)", "value": "e719588de94e1f43ddcf69ceb6a0ce28d1bc13a32d40142c135188cb4a2361f8", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771640741, "uuid": "56788727-6ab9-4fde-a638-57dd7d37f3c2", "value": "T12624238ED3A4DD21E4CDC5F1892BB2954DD13DE40F3E79AD363280F193BE59410A8B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771640741, "uuid": "9defa056-7f90-4059-b502-1eb052a8beb0", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771640741, "uuid": "330f5487-2ffe-4d03-be19-91ac3e382940", "value": "6144:gsu4fpIqxvgV6i9i9rGBVYW/Nz3MpBgU+:PuELxvs6/9rGBhapBg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771640741, "uuid": "0a6ffd6d-328e-4a02-bb92-fb11488ceefb", "value": 217088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771640741, "uuid": "c108c96e-c68b-442e-bf88-c25021fde6fc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "784bd57d-0ee2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771650126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771650126, "uuid": "8a9371a0-67f3-4bc0-bf46-7a7021c456c6", "comment": "Malware payload (Mirai)", "value": "d49cfac636a80e889231b1f98958775a", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771650126, "uuid": "4ea3dec8-501f-460e-9c22-66214c25f65e", "comment": "Malware payload (Mirai)", "value": "f24022271ac741b623cc725e64a14e40cd7720dc97c7f3da30083676550721c5", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771650126, "uuid": "032b38a5-94e8-46fe-b1e2-fd8dfc2bef7b", "value": "T1ED03F782AC92865689D813BEF93D41CE331273B9D2DF7152CD015F18B6CA94F0DB7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771650126, "uuid": "b9a643c1-a72b-4df7-94a5-e1b3c3c1415c", "value": "768:CMn1EjZA//+1vTRfRiOC7wYqT4JqsWA3B5d7I9ybMioW+j/LsYtXO0Cr:CMn12A//SrRftY97WARbIcbboW+zLsY+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771650126, "uuid": "fd7ab94a-2df9-4799-b2f9-07f402ef8ed4", "value": 41412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771650126, "uuid": "6f75a101-c439-4bd1-b8e1-f82869a225bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a95dc775-0eea-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771653645, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771653645, "uuid": "09fd36c4-cf8b-437f-9fe9-05f137964213", "comment": "Malware payload (Mirai)", "value": "83e664b6b3c4dd4a638412522a4d084b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771653645, "uuid": "f0ea2e9a-83dc-4be0-9569-58b6e26dc2e9", "comment": "Malware payload (Mirai)", "value": "037def81f4d4987a0c5fa5b5f10c8a7771111b3ca75d49cf2cc8daf7945c516b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771653645, "uuid": "e903c4dd-2c51-4818-9ca1-8b9ab53566fa", "value": "T11CD3F185FA276991D1A301FDA8D00AC287612E76CFA317080259F73479BDDFA0FA8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771653645, "uuid": "d7b9cd3f-f316-4ff8-badb-bd6201787403", "value": "3072:7Bnrp2i6lYVNdn6XUoZV6LIOSg8qcfj+bBvAtMMTnQ5g:9AStelmIOx8qjv2xTnKg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771653645, "uuid": "0c58b78a-583e-47bd-8ede-6d24b0ecf3ae", "value": 131916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771653645, "uuid": "c457b871-7964-4e73-b5ea-8a79a9764641", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f889b36f-0eeb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771654207, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654207, "uuid": "aefc8d94-7dbd-4efc-ac23-ce2ebf84a3d1", "comment": "Malware payload (Mirai)", "value": "631ea35a4d5d4d6d12316571e26c12b9", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654207, "uuid": "42fa5963-1681-4bef-8b38-5a8351741d9c", "comment": "Malware payload (Mirai)", "value": "9bb490ab60ac11b74e0b3d485d25c4d8c37ff65eab29fb29f6bd7d0255fa2573", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654207, "uuid": "2708ca4b-4784-4e69-8d09-021c6ee2fc8b", "value": "T1AC2136CD916190D305489EB8F87345A4B04C9EF4FCA0AF24A44DDD295C9B749B058A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654207, "uuid": "2aadbd36-3b2b-45ae-b1d4-f32862240c7e", "value": "24:wlzBI8KNlaGwatuc0WZ8st4htDQIhVU8NI786uu7NC2l:2Ft3isQ0EsM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771654207, "uuid": "dc9d0a02-fbc6-4bd2-9f7f-010099ffd5f4", "value": 1200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654207, "uuid": "03b00c78-aace-4633-b79a-2a778b789adc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8f537c1-0eeb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771654208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654208, "uuid": "4b7fd6c0-fd11-4e4c-97c2-ada502ad3c8d", "comment": "Malware payload", "value": "76f21ed0577f7a1ed0bf28a543a623ec", "object_relation": "md5", "Tag": [ { "name": "perl", "colour": "#8fdd56", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654208, "uuid": "fd4ed127-f3da-448a-8165-22748205a1d8", "comment": "Malware payload", "value": "aa8fdbdea3e110fd3e9d1255e2d7acbd5239175adb2db35a099391a4a988adb6", "object_relation": "sha256", "Tag": [ { "name": "perl", "colour": "#8fdd56", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654208, "uuid": "f82fc4ed-69de-43e1-a864-cc2d8bf7a8af", "value": "T14FC2964929E3891272BBF0765BDEA019776F81C7470CCE147D6C829AAF90039D1F8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654208, "uuid": "ef1d557e-4474-401c-97fb-1e0d92c24789", "value": "384:4JjsevQ4rDp2q7wuGNqkQ2fy4U+07kL3lT:4lsevQ4rDp2q7hGNqzZo0oL3N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771654208, "uuid": "75e672af-30f2-4663-9e4d-5717fc02c0a3", "value": 27367, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654208, "uuid": "9c56b37d-db0d-48c6-9bf8-b1d7ea468a65", "value": "text/x-perl", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "027c9e75-0eec-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771654224, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654224, "uuid": "47142821-5049-4e05-ba41-ebaa1a39407f", "comment": "Malware payload", "value": "8b95c832490f6ab9e03ad36e7d2324e1", "object_relation": "md5", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "password: 2026", "colour": "#a65f14", "exportable": true, "hide_tag": false }, { "name": "pw-2026", "colour": "#4d3d79", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654224, "uuid": "c6112103-0ea9-412d-b50d-42708cd29860", "comment": "Malware payload", "value": "71c67eb019890648ba0c312085482ac0e23cf3cdcbb1444bac62ad22f3b79758", "object_relation": "sha256", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "password: 2026", "colour": "#a65f14", "exportable": true, "hide_tag": false }, { "name": "pw-2026", "colour": "#4d3d79", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654224, "uuid": "39e2f6e4-e418-4380-a7ae-32db32b6bf78", "value": "T1B546337CA75A529CD31D7033BD9C88E15508A4297B22BA301C5FB732FA742B566C8C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654224, "uuid": "b90a5e62-9cef-4b32-9900-b78010fbc995", "value": "98304:dHyA2cz3d531u0IyqjXkZF+o4FLj60vMdiO+BereCGalIY:aytT9YuBiO+BereCvlIY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771654224, "uuid": "126dc1a2-82db-491c-8eef-34f529bc7ce7", "value": 5489134, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654224, "uuid": "dae6cb88-06d5-4444-ad44-6431c3ef3848", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0294caa1-0eec-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771654224, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654224, "uuid": "e110201e-a8c0-4f61-a55c-d470f1eabf57", "comment": "Malware payload", "value": "53d007e850871473321f3a4f68ab3615", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654224, "uuid": "bd1fc762-7c2b-4133-9980-4d27e78e79f4", "comment": "Malware payload", "value": "f76b13040c634f82a8332ff9443d84c89a5bced51ae9adad7fd15c05fadb4324", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654224, "uuid": "6030eb7e-44d8-4646-91c5-0cdfa306c9e6", "value": "T1FFB63391EF54D45DC2FB6633093302384147AD5E87839A93A9EDB37828BB5C16EE5E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654224, "uuid": "75584795-bd70-4120-bf9f-6cf9f7927b4c", "value": "196608:iSonhV3LR8YZuR1e0SmgSi9oU/ZSDGEj+rI5/0zbwEc2r7LPAoHqFvS8ZfW:WnzFkCr7SiSm1Ej//0Pe2r7Loj2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771654224, "uuid": "ac3dff7c-3ea9-47c8-a308-b1cdcadad639", "value": 10843124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654224, "uuid": "3bfb9955-96f7-4c74-8b8a-10db8f8ab7c0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0441b390-0eec-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771654227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654227, "uuid": "1a178b77-2e96-44db-8c2b-14395830e29c", "comment": "Malware payload", "value": "dfd9b5f70f012ddef6aece7749f31b30", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654227, "uuid": "3e8ffd8a-3d00-4fdb-be32-8fe836fc0fde", "comment": "Malware payload", "value": "f12a7c99151597cbbe63918494bfc943cc67d9be2fb0e50165e4ec49a63752ba", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654227, "uuid": "7dd3c159-b074-4097-b327-0ca6b7938ecc", "value": "T18BA62385B759643FC87A4533496A967422B7DE068E828743755C332CAC736CC4FAAF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654227, "uuid": "477bcdab-e437-4eaf-90d9-9362ab7d1c04", "value": "196608:yeeDn0h0FSy5j0246d+LtsDxyKgq3LeqiAplt+j0oCJg4CwPk+9tJ7wknvz:yee0hMZS/6gZqvgqbejAW0omgyZb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771654227, "uuid": "5de73c86-a7d7-4b2c-9553-442f46556373", "value": 10318639, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654227, "uuid": "3058ecae-0338-40f0-882c-edacd0380171", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04a0a25b-0eec-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771654227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654227, "uuid": "56345c78-ea86-4825-b5aa-d739bc84d6bc", "comment": "Malware payload", "value": "2cfa6f784be194e6b7bce52586bd516a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654227, "uuid": "fcc78570-4228-4646-99d9-4be6ed43e107", "comment": "Malware payload", "value": "c6290a3a084f1512a566d74321d782e8a7eff2bf1e647f5e1aa434638f5303d6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654227, "uuid": "c3a58958-34ee-48d4-b3f6-19f52c205f69", "value": "T1B2F66BC7E8E22E94C4EE8371D16A81ABB9667C0D0B3823DB1790F7241F36BD466767", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654227, "uuid": "e7e760f5-9591-4123-9114-6ec50316be45", "value": "98304:FNG43dQPIxHZbUc37dnhE1S9iA8S6GMxnvEpwty8fK49t/V8dsFobVelafZHDtpI:FpQ+m+7dnhEMSGcnuR8fKCNwVJi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771654227, "uuid": "19cab6c2-4475-44a3-979b-5650f0027fe8", "value": 15777940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654227, "uuid": "ef7cadab-febd-4645-8988-fdd1fac0d26c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64596ec6-0eec-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771654388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654388, "uuid": "100aad23-f5cc-400d-affd-3f0b36304d09", "comment": "Malware payload", "value": "9543e7094229e9b422c96bf5a05adc01", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654388, "uuid": "f2983eaa-b725-4fc4-9b6e-790b2b386ffd", "comment": "Malware payload", "value": "44e8937089b5f6c38899f8b8f509c12bd0d709deabf7208fce101ed7b61c4f3b", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654388, "uuid": "60116fec-a02b-4225-9354-d23f0f94015d", "value": "T15AC633E1358A863AC12A1631545AC368252D7D645330E5CB3BE9FE789B30FD27B7E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654388, "uuid": "f8dc5cc4-522a-40a4-8aac-4782f05adb25", "value": "196608:N3PsuiYp9bW5W2zAt1GgRYTQ6lJ8gKmU0767KYc0J+fJoj5dUoojZa40y0OlWwbv:ZuI9ygltI8YFfZ76Iynj5MZOy9Wwb+kD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771654388, "uuid": "0664caf4-1593-486b-9a07-462205d0086d", "value": 12124160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654388, "uuid": "e07cf48c-f339-4803-8077-01d7cde370c2", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cd89d9b-0eee-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771655288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655288, "uuid": "5422d273-dcef-415b-8c08-e961976cf480", "comment": "Malware payload (Mirai)", "value": "3268f9b8f66428e9c902396af7ba1f83", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655288, "uuid": "5396d59c-b1b0-4687-bb73-a27406501515", "comment": "Malware payload (Mirai)", "value": "38a2456dd82f660dc984cb616fd03f08d0fd6064deb8c794c8fcd50aee1d5922", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655288, "uuid": "1b2c7d10-f2d6-4a3f-b94c-2e0c1b3c3e26", "value": "T11703E116D1821EC5EFFFD57428B1BFD453E14F8D02AFA2972092AD02B81F828554A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655288, "uuid": "b677af39-1be9-4a73-a7b0-c21818267137", "value": "768:8Gfe47AQMTPqcOQ6utk3eZVw3JOt8QCSeEvH1es6h72laM2D74uVcqgw09i:8x4Csput0qVwg6Q5eEvVMnMM74u+qgwT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771655288, "uuid": "7891ba32-e501-48ee-a286-5463f57efa02", "value": 40140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655288, "uuid": "bd3e1bbd-f05f-4c02-89df-acfa984785d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ce1d7ee-0eee-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771655288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655288, "uuid": "1a7d1ef9-69c1-4d39-aeb5-d7324027c261", "comment": "Malware payload (Mirai)", "value": "776bfc4b8b9ddefd97b2bfb32484be82", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655288, "uuid": "42162d77-7520-4d3e-8f11-2c97246703e0", "comment": "Malware payload (Mirai)", "value": "7c9636e0d6e4334999dcce2f14e7419c8cf03884a502dfd31ff332add2538c32", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655288, "uuid": "ae701580-beca-465f-be66-8a08a87dca4d", "value": "T15613F1761989AEB2C0760C32D85F52682F3B077CD3B1253D379C4A58D25228BBA796", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655288, "uuid": "1bc0e7db-223a-4730-863e-526dd0ef7f0d", "value": "768:fiifDEdlpr8S3nuzKg+t4q38MmTDzXmjypcOVR2s0+PT2gQ2XPEshs3Uoz2:dDQVqzT32+FCsH2O/BMz2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771655288, "uuid": "f8212004-4a7e-4693-81ff-3f22d05e492a", "value": 41636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655288, "uuid": "7766aab0-7ef6-4bed-9b01-891a5d77e7cf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cf0bf26-0eee-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771655288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655288, "uuid": "dbd2cfb2-6b2a-4f16-9d10-5f1b7cd6c26e", "comment": "Malware payload (Mirai)", "value": "1e6f1e9d41593aa4b7eee0e48a084708", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655288, "uuid": "ef3e3543-c14d-40b8-9e59-662c255cf332", "comment": "Malware payload (Mirai)", "value": "763d249514c4c5e5ffc196cc4420784ad03d2fa33aa227b0b5bd1c3565c3381e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655288, "uuid": "bab21950-5c4e-498a-8166-9a2290a0770a", "value": "T1E973AE73CCAA2CA8D55842B4B5B4BE362773E41466871FF71696CA369007EDCF8093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655288, "uuid": "da9e650a-a1d4-4323-919b-4fa7e3d30e97", "value": "1536:P/Q0G/PRRILXNHJKtmmHT74t73RCAZuj8FvgsMg:Po0GXRMX5wt5s73RTZuA1FMg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771655288, "uuid": "eef3d78c-f1b9-4c75-b923-e42eb148ffef", "value": 80240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655288, "uuid": "4cf5c1a7-490d-457a-b693-592d97680db0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cf0ff04-0eee-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771655288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655288, "uuid": "7bdfe4c2-0118-457b-a864-2d6d345e150e", "comment": "Malware payload (Mirai)", "value": "9586dd439727ac273ac04b7185081c0a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655288, "uuid": "177454a1-9c79-44b8-82e0-10ccd53a41d2", "comment": "Malware payload (Mirai)", "value": "7d18f1225d590d3228edd6017728099fd2fcea4b56723b3c89ffd506d4e67647", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655288, "uuid": "9bceeb7d-660b-4797-b694-ae8786af1922", "value": "T18F935B22B539193BC4E4953722F35326F1F6438A14A88B1E7E720E8EBF256D036477", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655288, "uuid": "10ac4294-94b9-40d6-9eb7-2a9bf4c78488", "value": "1536:0sRsLVu48xrIz6YqPog6N8HGdtAQkYm5V4A1Ywt1Ix:0kqLMPmdi1YOyWIx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771655288, "uuid": "03e33073-3baf-4ec4-9303-37c7470ab7f4", "value": 91960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655288, "uuid": "ffc2ce70-a3eb-4560-ad16-b8e9a357793c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8210b6fe-0eee-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771655297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "262ebe8c-e960-4e30-abef-8fa885e00471", "comment": "Malware payload (Mirai)", "value": "991b6ab0479d5da525aece80e6f0e6c0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "c5f62f46-5560-47d5-8ca9-4c934cb23fec", "comment": "Malware payload (Mirai)", "value": "52aa716da3d2069286fe8ffe2bc40758565228c3c3e75684d645b73f36fb32f9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "b57a6322-f53e-4dc3-ad6d-158493a1c042", "value": "T11813F1EB8439A775D9320DB1054072F1CA5AB553379A273F08197F5E483FE44AE70E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "7740d96e-5ccb-4fd5-8f44-6bf6723e2705", "value": "768:RhTPjCYZOih2sCqbK0YgVf+yajc8rc8wNmaGw+i1VyyTBx05n:RhTzOitvlYEalrnuqqAn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771655297, "uuid": "348aa54a-1d08-4d66-8f71-02559e24d5db", "value": 42020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "db037ccf-d900-4db7-b427-f44c8e5de26f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82173eff-0eee-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771655297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "257881c7-35cc-4884-bc55-1f368a69e2a2", "comment": "Malware payload (Mirai)", "value": "a3aba91bc411b4a5f6a63b0052725593", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "f55e3fd5-6b2c-4773-b458-c7c21f597f11", "comment": "Malware payload (Mirai)", "value": "c826f80e8a9d7fb912e07bf86a03daec5e100b2580ff90db7f534b0f8199bdae", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "b1ea0cda-c995-4598-8a8c-b7bd408e59b3", "value": "T1B2B2D0F4321E2671C870083EAA3C8146768312F5A5EB5B3E2821466DDEBE517A9BC7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "7b20a2f4-ec4f-4f6f-8cbd-4a5be06dff16", "value": "768:fG4rcUl3p9byh2Uy+2XpOhD4owpQs3UozMgm:NrPj3o8oUFzy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771655297, "uuid": "bbf396ac-c643-472a-9c87-592ed02065ad", "value": 25104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "9e08f988-6403-41f2-843b-673206ff3077", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "821aab4c-0eee-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771655297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "483f0ebf-426d-40a1-81d7-732e6428d090", "comment": "Malware payload (Mirai)", "value": "4dd5b4279561ba5c1e5aca0520941a1d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "95bcc134-7a89-4056-853f-f5a4df1502a1", "comment": "Malware payload (Mirai)", "value": "291583d9406fe5602c2d2daecbddcc92e00977e7a863d92eaccbeb1c1f6b4f2b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "2becef46-ec1e-4bcc-bf25-5a2a3e91e65e", "value": "T1AE03F199D44C2D70F9AE21F05CFDEB4B5420968CD0B4CAE3DBCD161B2B61E65392CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "7ad3adcc-c6fb-4080-acf8-116f92de5a02", "value": "768:JpDDQdmx3ELhtPG5AZhTHgQtiLDPNie3Asw64gE6nBjIfoD8j+VvnbcuyD7UHQRF:JpfQdmx3EdtPnZhrft+Me3Asw6C6B0Ic", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771655297, "uuid": "5f31b19b-bda9-4419-a648-37e520a18a32", "value": 39692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "e6b6cae0-4cc2-4acf-89aa-3755c4be0c5b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8223befc-0eee-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771655297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "420cc776-be31-4b09-b409-73e35745c22d", "comment": "Malware payload (Mirai)", "value": "dd771f553b6be93cdcbb6f11f759126e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "4221680f-4541-411a-be26-5c1b296512af", "comment": "Malware payload (Mirai)", "value": "d6e33775c5e839e85414303124cffebeee61acac69ebc9a35c74d48e6f223649", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "407fa70e-8e34-49a3-a030-1117537d47a1", "value": "T18313E08EE2D8769BCC7D7C77C49E0771AD8D8183239B1ACA1349CC94DA25E4B32910", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "7e57265d-acb5-4074-9c2d-7e2ffaae1c36", "value": "768:nx4mYFaluq7c2hrjYJO5AhCA7ks2Q4kUx8vdgBxTgO5qJ5a4RvSxmtyCm0v/97hz:nxhYYuqYZJOFE20d+xTfzSSxVCmg/971", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771655297, "uuid": "848e5d1c-37c5-40d4-a258-380793e5a7d1", "value": 44532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "48c0b83e-334a-4cd5-8f35-6c6387da13e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82257cf1-0eee-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771655297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "ae7d3562-dc36-4052-b3d5-61514a4c7fa1", "comment": "Malware payload (Mirai)", "value": "dfcbd3b9f35ec517c9e2075e22461fa8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "5e3b512c-cf0c-4d7e-92fa-e9a17f9fd92c", "comment": "Malware payload (Mirai)", "value": "a125d5ce74a326cd83c334f38e37e56f38186dfca912a6a3a8d9a0269401402e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "699bcafc-0e0d-47bd-b2b4-94a974f227aa", "value": "T14E13F259625F85E6CC206D35FC214B871F8092B072ED30218BD8ABEB7D9C3B357E21", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "5aa72455-f20f-4dbf-8dab-ca4b852da399", "value": "768:aFU5jg+eO3dCE5M+nHo2mu3NnrQy3txM3cP11R1gHv6tpfVO6fAJFaqWDjKjfFwd:aFU1g+F3nM+nr33NnFLYK10v4XYWqqKg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771655297, "uuid": "739f887c-ace0-4558-a7c0-e231019f62f2", "value": 44760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "1751ba09-8606-44dd-a907-dce69eb12dbb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82258501-0eee-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771655297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "3102158a-e9b2-4cac-b1a9-a272276cac03", "comment": "Malware payload (Mirai)", "value": "70865d4e71a06033b89bc8ed186ffb7b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "6f5b9304-3acf-4580-a924-ae6222899e0d", "comment": "Malware payload (Mirai)", "value": "f10037af48312323111ce1a262bdbcd5a135043cb05300b0aa9d0d35ff6319ed", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "a3f47a95-649b-4187-a9ae-db7ea5a0ef3b", "value": "T15163027EF707D8DD34302E76F89AEA0A25E40CB9CFAF7A9641101E207EC3E4151653", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "211dfabb-45b7-4240-b73b-384fbcf8fb97", "value": "1536:IU3Bp2NvAdO9spSBKC5pOJzYFmQyLR4SraHLG8gZNq:IUKNodhMBKCIQyLRLraHLG8wq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771655297, "uuid": "58247f4e-d812-4a1f-939b-d2adb7a2f78b", "value": 67412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "77fc234b-94d5-450d-b7a9-f77a5774f396", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8225aa25-0eee-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771655297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "375aef98-f239-473b-a6d2-4fec183de0a6", "comment": "Malware payload (Mirai)", "value": "825b3d491f62c7432675fa8488ac862d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "ce283032-0f3f-4ea1-8a16-c8a8d6c8bd12", "comment": "Malware payload (Mirai)", "value": "e18e8c55c914b1dfb208fb9b87f73eb3db8ced972d8b96b2fe11d347662c2621", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "37cad398-e42c-41a1-9caa-5a345d00e024", "value": "T17E13F1B804124AF6DA09E67216F30F134D819FE2CC07FC4B999A7586D8E9C9D1C737", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "5f6eddd9-cfba-4b2c-88d3-b08f11fcdc14", "value": "768:hVKH+MeiZH7vnvd68KHyM5Fg1/WKbJjCn7SVv4P0Fb+gJJgGlzDpbuR1Jh:hV+1eObvnvd65HyMjiW4+7SVvi0FaKVu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771655297, "uuid": "6365b5dd-9a5e-412e-9ee6-828ec6b51cf0", "value": 43272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "0d99596b-ab5f-4461-b749-ea246b926bb5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82340ee8-0eee-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771655297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "1d225ea4-a653-4459-9883-f69156c7e14f", "comment": "Malware payload (Mirai)", "value": "2bb42d0603504a478430a824ff87e42b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "abdf8564-e4b6-42ca-b9c4-f1546bdd79ac", "comment": "Malware payload (Mirai)", "value": "cc8eaf17e9933d4f68464bcb3ce7ffd49b7cee82cb145b6f1492529f38f5c442", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "4615dec3-655e-4e83-be9b-115babacc5b8", "value": "T1E9C3AE97F78B24A1C86146F007C76B8D3EA362019E6BE9E76C1E753B193A1DF19063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "7fa7fd28-bca9-4d30-9404-55ce5d8e7775", "value": "1536:nq189r2mIHgqH8INi8TNB4ZPLaLWq0IijTQEE8+FCUxZJ3eg9l/LWg:q1ur2nj7BZqZPLetETQC+FCkeg9lq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771655297, "uuid": "ce56a0ef-5188-4257-b0ed-d4ae3e86acd7", "value": 124352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "f474065a-2eb9-49dd-93d1-df6ead4b2be2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "823770a7-0eee-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771655297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "5d061512-3097-4dd8-94af-6b44b7607ea3", "comment": "Malware payload (Mirai)", "value": "e8facf13df34b4382c3f52704c2b05d7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "c6652234-8d87-4597-ab14-aae9e7b90cee", "comment": "Malware payload (Mirai)", "value": "3bec65b58f2495394cae5b7966102d7d41ce11852b9dba1c34ba99a1e54126c8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "6ff4c8ba-9d8d-4588-8fb0-25b8703ee10e", "value": "T1A29329C6B401DC7EF80FDABB4463690EB631E2511A831B26675BFD53AD321E45923F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "c27dfaee-b7b7-4438-be33-2ef217a78aca", "value": "1536:xsdLEbXJld35KM6hRozWD/TJsP8dFWqvl1Pj8b4b29wv5tLBo0zzHlplo9K+tMUL:xjKvhgWD/T/wqvlNLCetdoqOK+tPKmB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771655297, "uuid": "5f3a5bac-c850-4d9a-bf0d-68b38141e710", "value": 96728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655297, "uuid": "5ab26dee-5f2f-47be-b96b-c82dc73a454f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a31ee2bc-0eee-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771655352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655352, "uuid": "c646e7f2-5726-47e3-9765-33f20b302cd4", "comment": "Malware payload (Mirai)", "value": "c160b3a5562f302e540b79ae3325a154", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655352, "uuid": "5b98d6df-9870-41e3-8881-d0b49c6f9c22", "comment": "Malware payload (Mirai)", "value": "de01ea5c6860c946d7b74242fba483fb365ef14b79e6437851d3be3e3d4d1ab1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655352, "uuid": "ef10cd34-28a3-4ea1-b4bf-4ab04b323ca6", "value": "T1AE03020B71764A5AE889507D01EFB1073414875BB413A9F1AEF44837EBDCF082A6C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655352, "uuid": "04d82e63-72e3-4362-af93-675b1b8984e5", "value": "768:ngQcD4ioAAYVyCH1DIQcjxDyELLLl4bZZxOTOCZVf0FZnN86s8nbcuyD7UHQRjI:g6diVlth2xDNLLLl4bZZxexf0nouy8H3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771655352, "uuid": "fec5fb8a-3853-45ea-a9f5-13eda07d3a3e", "value": 41288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655352, "uuid": "cee72c09-435e-4c64-b2ea-ded9160d5af2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76ebf780-0eef-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771655708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655708, "uuid": "29f64d1a-8453-402e-b2dc-72116b6d7929", "comment": "Malware payload", "value": "6ee2b2f0d4e37661c4246a19e1f0d6d3", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655708, "uuid": "ee22b179-7bcf-475e-847b-6391a09415a9", "comment": "Malware payload", "value": "f3568f6e161096650ea92279ffd256f64cc37c158f1a2662f9b15ce06248570b", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655708, "uuid": "f8df3d51-ec93-452e-99f3-5204cb322c65", "value": "T14B34120103DB5A8F65C7C53F412AF891A7EB315E7C7E73409F969A8A521EEEC940B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655708, "uuid": "7160939b-ea46-4bcd-be79-061198b760ec", "value": "6144:Gs/l+XHmhcSV75IThNCedjpnyPnQRrLiRQVFFuTaD:xaHmhfqXJjpnkQBLiAXua", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771655708, "uuid": "1eb32c4d-5cfd-467f-a83d-5e485c155eae", "value": 245824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655708, "uuid": "41f12639-bf24-4879-8fe1-2f307bfc6e43", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7710e26e-0eef-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771655708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655708, "uuid": "b92c7ef9-0533-498c-9759-a39a2fa92dc4", "comment": "Malware payload", "value": "9dab75f43ed13cb31bb8f2270ad3e8f0", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655708, "uuid": "963aef1a-b888-4490-84cd-641e059997db", "comment": "Malware payload", "value": "6d83be8dfb7069a72fb8211a3f0efe57e7a8f9849d355e85392cb020f5bbb4cb", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655708, "uuid": "525f07d9-02ea-41f8-9b4e-374d38c93f5f", "value": "T162B423B3E2C9978375F796F44F0AECF82F586153B524196C170AA8BE604E760E5B32", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655708, "uuid": "3e94bf53-d742-4ec7-97e3-55c5d73236da", "value": "12288:C7s6tL4e/+9/5QAGXqreaVbLo+Lphyes3WHwAVxTaHD7:0sQLS/6AUqCaRorublO7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771655708, "uuid": "97b404a3-ee80-470e-9c8d-056275325a86", "value": 528448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655708, "uuid": "b40ddc3f-c3ce-4179-af63-b2440616fe5c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a883c47-0ef2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771656895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771656895, "uuid": "31e9006d-c4a8-4d58-861a-67f351f57e95", "comment": "Malware payload (Mirai)", "value": "5248fd2303e29775ca01d45725a7077a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771656895, "uuid": "d21fa997-7ae0-41dc-b3a3-50a2e6d12e70", "comment": "Malware payload (Mirai)", "value": "caaccc18a6befc7484853a9b74bc3529f50bd3cc37ce78071128fc92f4a15b9d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771656895, "uuid": "23ef9a22-f4f8-40c2-9464-bb664488cf50", "value": "T1F3D3D021F1049D91DC2019B9387A9BFC0750DE7407DA6282FFFDE9AE647BD9434AE2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771656895, "uuid": "91d0d159-dd2c-40d0-904b-d21b786cdda9", "value": "3072:qQiWLEirEuKz3CKWIVvlLsQEYsqJdaN2Zkqe8Rf5i:qVWwcKWIV9L46aN2Zkizi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771656895, "uuid": "ddd88652-4fd5-41b0-9a30-737ec66fa715", "value": 131668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771656895, "uuid": "c7db6cf4-2275-4be3-9905-61f138ac4b41", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56a22665-0ef2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771656942, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771656942, "uuid": "b1175903-10e3-4dc0-b19a-63fe9afd365b", "comment": "Malware payload (Mirai)", "value": "c3afe65cf5b4be1a3370b1915a6b2f90", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771656942, "uuid": "12ca27dd-8612-4f53-885c-da0d713d807e", "comment": "Malware payload (Mirai)", "value": "03ce826ffbd8436e6cdb27e25a9c8483d677e608fa111b1d36a0379f1f3299da", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771656942, "uuid": "87b0a7fc-12f9-4e1e-8f5c-7309486774da", "value": "T10E73021C63E269CED7D41E39DDF2A66EC7202351F227138EB5AF2142B0585651A2CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771656942, "uuid": "2b49a391-9965-4ac1-a291-93a3451f9cc1", "value": "1536:G1Ugz+DMqU4xpgFYhdFAwKj+tPag0rDzKjhfM/1cJlw3gorf:G1X+DlwFMJKj+tSjPzKNJa3gSf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771656942, "uuid": "db088621-6e17-4ed6-b96f-cab54c836c11", "value": 78548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771656942, "uuid": "49f21b8a-dad6-4ff3-809c-e96706eb9857", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5af3435b-0ef2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771656949, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771656949, "uuid": "d737bb20-f7f0-434d-840f-5da3ea792d36", "comment": "Malware payload (Mirai)", "value": "676e8dfd5e40fb1f59aad5a16a43bf84", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771656949, "uuid": "e5cc6d9f-dc93-4588-a78b-4a060b9e3796", "comment": "Malware payload (Mirai)", "value": "2f475bc50b4cf52ad87921d41b4171768b78e7dc76297a58683815aa5c747661", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771656949, "uuid": "b52516aa-dcdb-4d3b-9358-c37d0902cf4e", "value": "T15963026317A8CA9FDECCF3B1908A415B8F13C82AC4E9CC4F6CF69D89510109A7E906", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771656949, "uuid": "84c062e3-0083-4231-920a-7852c44ab2c7", "value": "768:4rN46+frQbA0OuLAQelnwEYL2JqMEzjcZd+d21jsE2iJuSkAib1w3e0GkEqCZAQL:4Yr3MOw1MecXaNCKiMkJOJUNAQW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771656949, "uuid": "db7c312d-d87f-405e-87fb-658b9bce4c63", "value": 68180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771656949, "uuid": "72830503-24fb-4879-93a8-4934f03f46a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c0f55fa-0ef2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771657058, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771657058, "uuid": "ffcdea67-4f63-461b-bfcd-7a5b80e4236f", "comment": "Malware payload (Mirai)", "value": "79cf67e7f16e0e3cbff544299a0061a3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771657058, "uuid": "0313462b-dc3a-4256-8832-0c2fbe503110", "comment": "Malware payload (Mirai)", "value": "329cec30ee710011f22b50e4c719d4bc0938ebdf5472eb166fff7d0bc1295728", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771657058, "uuid": "b83272f7-4192-4889-87cd-1ebd741b8a3c", "value": "T1D1D3CF31F0099CA1DD101A78387696BC1301DFF40AE55283EFAED4AE64B7D9539EDE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771657058, "uuid": "3e28ab2a-6dae-414b-8342-3a0e9560ea67", "value": "3072:lt+ydD62EKKzYC0xBp91Ey0ZHcio53GiGhc3PI7B4IZv54:lt+ycs9125cioYTyfI7iix4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771657058, "uuid": "9836bed7-12fe-4d90-a042-b20bbb0b7df0", "value": 131660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771657058, "uuid": "f825c308-7c69-4bc0-92cb-341423b71899", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5827b52-0ef2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771657074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771657074, "uuid": "7b3ebd65-448c-4378-93c8-f6f5c188552a", "comment": "Malware payload (Mirai)", "value": "658632679cfc9314bf225d4b05a44d63", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771657074, "uuid": "d21784cb-a561-40f5-ad15-7284a93d07f4", "comment": "Malware payload (Mirai)", "value": "314acaf706a13f709d8064d418248e10d9bf72416a64041389fd6ee6db39b748", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771657074, "uuid": "e5813406-48e1-4b6c-9349-c7e20a5d2ea4", "value": "T1F6248120FA0663B1CC731A3867992E5A6E7714159FEB26312D1F533CDE628509B30F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771657074, "uuid": "afda70ed-b820-42b3-bd68-92aabee33e1e", "value": "3072:KZw1yegchOlt3biIzXwnKMHop7xb4vKmTlIIl6Vz+UKs:KrDtri2XMHsb4SmRYZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771657074, "uuid": "e02867fd-ed9c-4887-8c28-5dced6d335dc", "value": 213612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771657074, "uuid": "cc252ae5-1154-488d-9d40-e78cea2468a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "966851be-0ef3-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771657478, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771657478, "uuid": "624e7f8d-79c0-4daf-95df-95cde6ef3520", "comment": "Malware payload (Mirai)", "value": "d06990b93bf7a3be666851f656cacc0d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771657478, "uuid": "f35a569b-dae1-4e59-8f80-c186bb2d218f", "comment": "Malware payload (Mirai)", "value": "4034d3c1d40097edcfda1c7f97ff057dc11b8dc2f25a16e53bc2122cb6af07ae", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771657478, "uuid": "c23a84fd-f521-4c4f-87f9-15b1e388af65", "value": "T1AC731281BF423DF9CD6CA636BC42034D5D03EA877726C68E3AD3818C6DD659DA7584", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771657478, "uuid": "b1a71ec6-692e-47d9-9b4e-916c1dc0e61e", "value": "1536:jH9e/WvsImg4AW8On/4a240KNQ2w7juom8cdY7GCTSUY2bNq:jHg/WmmWhgaq2wmtlOGVcbNq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771657478, "uuid": "cba01c28-d8cb-473c-86ac-96b7360c26c6", "value": 73964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771657478, "uuid": "2521044f-dc3f-4559-8723-88d6fce117fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3674ec2f-0ef5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771658176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771658176, "uuid": "5b4074e6-22d6-4332-816f-b5e5fdf99a5d", "comment": "Malware payload", "value": "09bfa15bb193186f5ace49af85927de7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771658176, "uuid": "d8d268a3-e2d0-4ceb-b3df-2caf0760b6d8", "comment": "Malware payload", "value": "0308c452605e8a216e1ed211674473152106e9f8fa4b61d3aeffd8fe5a7ec5bd", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771658176, "uuid": "0a265c21-5992-4e06-805c-4e3e6a0a6fa6", "value": "T19173D45D2BD85AE1FB453832621751562003910D53A172645BA2C53445D584758878", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771658176, "uuid": "5ce29c0d-e734-4e81-89d5-f5a2065bb4ea", "value": "12:lZAH/6iO/7dmEvVuwizuTG84r+xN3VKZsslrwb2Ozezeivlln:HLV4+f4rENFKZsslY2Ozebvll", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771658176, "uuid": "9b4f1fa7-92ed-481b-9045-82f08b59917d", "value": 80584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771658176, "uuid": "315d617e-1b04-4e3c-8be0-22cf9b399e09", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38caec55-0ef5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771658180, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771658180, "uuid": "494e31ef-dca3-4e4d-bcea-9c94f5895f9d", "comment": "Malware payload (Mirai)", "value": "acb4991976bd8b4bf7f3ee7cae376cc9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771658180, "uuid": "bc6d0446-a1d4-4116-8f8a-8f4fa598b117", "comment": "Malware payload (Mirai)", "value": "411aec2600ebb8e2dff75750ea2c6ddba1e61188a9dd140de45fcf27fa9cc4aa", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771658180, "uuid": "5f15316f-56e9-451b-9660-43bb6c7ad0dd", "value": "T16E53024BCCE4A1AFDE29F67528306415C1D6A9639B37D3C4422E27412EF1260BF99C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771658180, "uuid": "73c6789c-a5a4-4fb4-a5e4-fb2553cd0587", "value": "1536:DFdejGMz8QeZyQ0e9+cH1NYXuo9ScvSp59xG+Fo8jLkg4azHA:DFDMZmbrHYXr9ScvytSGLGazHA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771658180, "uuid": "12e8e0cc-ef39-454b-bfa2-263446e241f8", "value": 64144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771658180, "uuid": "48d69334-6695-4aff-b3b9-3dd394223411", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "529c9934-0ef5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771658224, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771658224, "uuid": "9a8e7a8e-6654-4c74-989a-2db14e50a880", "comment": "Malware payload (Mirai)", "value": "9db25d722514cc001d539387d50f0a89", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771658224, "uuid": "6a7cca09-1ee2-4790-8338-0084aa883ba7", "comment": "Malware payload (Mirai)", "value": "5284f88167faa897e66e1535c8a75962b6a89e767bad3b554f6b383093eeb029", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771658224, "uuid": "f6320e38-20ac-45a8-8443-5bbaa99500ce", "value": "T19004492F358192F0F6411B746BCBD3976C290BBF51A990DF6B416329B6E0B7BA02C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771658224, "uuid": "2c351bf6-834c-47c4-b4b0-c7c51debe85d", "value": "3072:r3GbcTnSllpsJfuuSPMEfV4NCCr6/0O4Nc2I8NOTHLYo55eoUXZ:rUcmLEyV4Yza8YOfYo58ZJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771658224, "uuid": "1b6a1456-5d43-4490-88f7-344bbbde170f", "value": 180812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771658224, "uuid": "7bb7171b-0678-4272-9f65-5153ff48f27c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11a3634a-0ef8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771659403, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771659403, "uuid": "f7d555b9-2f19-4306-83d0-6ca1a47bb741", "comment": "Malware payload (Mirai)", "value": "4b134eb1f5d6ee90a1c11755ca9c576c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771659403, "uuid": "8ed0f1b7-ce10-42e1-b776-da5c84b1011c", "comment": "Malware payload (Mirai)", "value": "a7d2bbd8da4d8aa35b1e760b6f27289705840a0bf8507df2be3997445e0362e9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771659403, "uuid": "c707f684-d96a-40e7-9dfc-b4d98b9b7da9", "value": "T18BB3E188B214FB66C41322FCF4470984A3716EFA4B9A560781A3F5746DBCCD47F0AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771659403, "uuid": "932ab3ec-c61d-4066-905d-68f354540188", "value": "3072:Pq3yjuqoEN2tN30kEeSx75EBb8b5KXNwuXc57:d3y30WSx5HdCNwf7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771659403, "uuid": "c8bc048a-144f-4677-b3d1-58a406595946", "value": 115880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771659403, "uuid": "0821e865-c6ab-4c3e-b89f-1f89aaf7f67d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42a587ad-0ef8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771659485, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771659485, "uuid": "3c13bbe3-215e-43a3-a1d5-ae387713a381", "comment": "Malware payload (Mirai)", "value": "0d042f8d14f5e72db33086cbaf08fae6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771659485, "uuid": "316a68cb-2a0a-4238-921e-366a20f6d18f", "comment": "Malware payload (Mirai)", "value": "a3be89eae3abf909aadaa3d7021c77d491ed6425cc665725651be53131ba4ffc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771659485, "uuid": "31f71e2e-5cc8-4b78-b37d-cd5f9e4f374a", "value": "T1787302DF83D5A9EAFF2CE57DD22441C57A8E0845F08ED1899349074E8C5AFAE72C2D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771659485, "uuid": "2ca778ed-f16d-4b73-9170-a08ed82d1355", "value": "1536:ZQF/TD1259L3D1WlIFebHwK7N7n/c3iw5jA09QsS4bjZ5LurPx:V59L3DeIFSPoip09rS4vZ5arPx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771659485, "uuid": "757b2067-04fa-4fbc-8f58-3fbc984a4dbf", "value": 74836, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771659485, "uuid": "eb79270d-cc41-4bd5-85cc-44323c2f0c1a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3cb0253c-0ef9-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771659905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771659905, "uuid": "f70ca6a9-4a91-4ae0-ba46-3e45c1d227ef", "comment": "Malware payload (Mirai)", "value": "5403906a7ed47d6d31f037b3cd6b7cc9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771659905, "uuid": "4ef97c43-9f66-4b8a-b75a-47a8b71bedfb", "comment": "Malware payload (Mirai)", "value": "516cc2dacae1a1d55ad57744aefc133d0b10b83033740c824fa827bc197735d7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771659905, "uuid": "cea7dac6-9c50-489d-9c56-52bba16f1ee8", "value": "T187B3A087645079BFF465AE3FC8434E169B259F700A87572E61BDFD90AE393903382E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771659905, "uuid": "6bff6151-5eae-4b63-89c6-c4798d767995", "value": "1536:sZ1iUo+SjlhTguNeRR5uN90/x+QnybBMJaPzKUHl7nYDum3DTOSaY9nr8rSM:s7ihtjH8FNuOx+9BMY+c6DuaaY9USM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771659905, "uuid": "080afb91-a08f-43eb-96ab-a81404f580ec", "value": 115120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771659905, "uuid": "f74fd827-2649-4bbf-a518-b0617cfaa479", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8700f2f-0ef9-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771660193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660193, "uuid": "fa526c05-3427-4c6b-8dbc-74fcac993fc0", "comment": "Malware payload (Mirai)", "value": "26024c93b9732fd765f1a3c8c6675c18", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660193, "uuid": "05ca4957-aa88-4792-bc87-415fffeac455", "comment": "Malware payload (Mirai)", "value": "c2a52b8b04f72b7c281232d32dcbc3756ad7f4a9d28bd2d42a394a4e628ddb3d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660193, "uuid": "ff5009ce-2e26-4ace-b27f-a5f2c68f39aa", "value": "T17C146C2BB3C39CD6D11067308C316362772FD7081958EBFFDA163794A997B229A246", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660193, "uuid": "2e2d2bf3-506d-481f-921b-95db10f9a054", "value": "6144:3BROm515xbA5Gm3GG7M1NSAYxr0Cl7IKTto6:3bw/b78Mljl7In6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771660193, "uuid": "c979cddb-8fb1-4383-9627-129d71424214", "value": 197360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660193, "uuid": "1d30f32a-057b-469a-b50a-ae2a96a59478", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8be8cd2-0efa-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771660516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660516, "uuid": "2a68b19a-dbf0-4bcd-852e-65756f6c36fe", "comment": "Malware payload (Mirai)", "value": "0f41976d82642b820a8682d4f9c02f7b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660516, "uuid": "a1015d0b-cacc-4099-a205-6ffb51d8e6c9", "comment": "Malware payload (Mirai)", "value": "9274518d14cacb94e28286b675fb755c99488f6b701938c2020114d730ca13ba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660516, "uuid": "92bdf378-023d-4683-9372-56bb7b6f1fe5", "value": "T1C8D35C0677180E57D5A34AB0263F1BE083FED5D121F4BA89291F9B6A4672E3B5481F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660516, "uuid": "17f955d1-3303-4ca9-81d0-71368d030cc2", "value": "3072:JUFczWKNZhc3JiwmS7ZHr2Um/u4SM89tkkb:DvNo2kdr2Um24SM8Pkkb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771660516, "uuid": "a2626950-e9da-4877-baed-4f8730430c9a", "value": 134328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660516, "uuid": "f0930862-0115-48b2-81d0-fa57c06201b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab98bdad-0efa-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771660520, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660520, "uuid": "2f357322-50f6-463d-aad2-e4ab91e11cd4", "comment": "Malware payload (Mirai)", "value": "f282f305ab0a514f14659318d963761c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660520, "uuid": "a8912aca-970d-44da-9f6d-22a928ab3276", "comment": "Malware payload (Mirai)", "value": "774e3ad01553f9513d179a2efbc04bc28f5e5ed72b145473b35ddb384744a781", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660520, "uuid": "63c20594-3113-47f2-b659-987b8b69f09b", "value": "T14DD34A2275391E2BC4D0A87E22F74361F1F167DA25A8C90E7EB20D4FFF252206547A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660520, "uuid": "ad42e1e5-81d4-4d61-ab11-879c93ec176c", "value": "3072:1CldeCsOs9kzj2vV44qURgyPykV30Qm9Jlsb3jQ4:wPeCK9kzivVjqAymymbTQ4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771660520, "uuid": "8ab49752-b947-4574-af19-739cd440048e", "value": 140776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660520, "uuid": "d30bad47-4886-4791-aa8a-2c5d0f915de0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aba2e20c-0efa-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771660520, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660520, "uuid": "4a912557-0c31-4bb2-8e9d-3d6b033aceb6", "comment": "Malware payload (Mirai)", "value": "00029f97ab816feed88acc9b6bb046dc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660520, "uuid": "ab6d44fd-6c4b-4bdf-aa2a-48aee41abaef", "comment": "Malware payload (Mirai)", "value": "3da1c1cb820d833fd0506b0f8a8048b75eb63d684d9e9bd924911a6f2b495e66", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660520, "uuid": "8b85400f-55cf-4a5c-a54f-b547a35406a7", "value": "T16DF3B50E6E198F7CF79987344BB79E32965833872AE1C582E16CD7105E6024F641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660520, "uuid": "abd405e8-32a5-4554-ad40-8480df9119eb", "value": "3072:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJBQX/uw9EfszRpSP/Q4vkTTzTT4BFZDiwR:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJ/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771660520, "uuid": "923e04d0-f0a3-420c-be23-07d71878e49a", "value": 171724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660520, "uuid": "b3891062-d098-49b5-85de-444e86f42fe1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abad8793-0efa-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771660521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660521, "uuid": "a3d2fd1b-25f5-4888-ac9a-80abd571a556", "comment": "Malware payload (Mirai)", "value": "d0b793ac9ef27435295f9f63d0b951b2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660521, "uuid": "2eb54f44-d505-4901-ae5d-77ebfb2df546", "comment": "Malware payload (Mirai)", "value": "3c1dc72c6475841e62885be3613578e710bd146e82b0244f8634f19dd74a47ff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660521, "uuid": "00a40e8b-ad1d-47e8-a106-34db97a866ba", "value": "T160E34B55B8828A22C9D513BEF92D018E331327A8E2DF7213DD105F2577C7A6B0DB7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660521, "uuid": "37244a82-3446-4b65-844a-f229bcf962d6", "value": "3072:ENcMOvrpToDzK7rMeQzlue1k6aU9zL6EiueCo2kc:AOhoDzKnMereS6a4Iueckc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771660521, "uuid": "bc472d41-b0cb-4524-a103-3ffbc21be236", "value": 145536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660521, "uuid": "4b8db512-83cf-434b-8290-f50386f2dc2e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abaec83b-0efa-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771660521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660521, "uuid": "e8d1fc83-8ac9-43a8-bfc9-8bc9b4b3ebec", "comment": "Malware payload (Mirai)", "value": "f1e69c094f31b65c550e453b3b13011e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660521, "uuid": "b2aeeb1c-8268-466e-a5b6-23829194c54d", "comment": "Malware payload (Mirai)", "value": "99f0e92481ffb56bac0ce4c529d105a51e00b9ab3626b98c8cc4105279f71ff1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660521, "uuid": "112dc057-6223-4d6e-9cf1-b4247ed0b367", "value": "T178D33845B9829A27C5E523BBFA6E018D332563E4D2DF72178C215F217BC681F0DB7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660521, "uuid": "c97b6866-e5e2-4a34-8f84-c659d78ea022", "value": "3072:8nFif7apx6XS+kUgpjWX60yMgcWOgc6ZzyQSQ:8n8ZS+dQWX60ydsgr+QSQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771660521, "uuid": "4d788b16-52b5-471d-9461-150ee04196ae", "value": 140756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660521, "uuid": "1914e51e-0a9c-420e-86a2-1620b4a201e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abb208ec-0efa-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771660521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660521, "uuid": "cd96221a-4d3b-4c0f-8ce5-4d2b99f2e9b9", "comment": "Malware payload (Mirai)", "value": "126117cd39c8f733501e6b096d2a3aba", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660521, "uuid": "27fce724-fb16-4daf-9536-b3bfc2370b14", "comment": "Malware payload (Mirai)", "value": "40c0ea887499837bd9731048476f1ac6544ebf5edb96f7aac590cda2ac648e20", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660521, "uuid": "73723a67-bff1-4cb4-9a1d-b7fdc2ac385f", "value": "T1BF93E551BC82562BC6E423BAF6BE668D336577E4D2CF722BC8214B117B8551F0D63B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660521, "uuid": "551bfb20-867e-4bfc-9235-c0f4be80df53", "value": "1536:pd+dGSq/lv/d7rMbIG4WetuLadxi0cbrT9KM5cZiw+bY4d:f+dY/lub6Y0WcZi9dd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771660521, "uuid": "a58952c5-a318-4df3-99d1-e841e0c6c882", "value": 93792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660521, "uuid": "5d23f58f-7ddc-401a-be11-7f3b197cc3ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abb3a615-0efa-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771660521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660521, "uuid": "0c3e202c-b008-46ca-8c40-65f6f00fb664", "comment": "Malware payload (Mirai)", "value": "e9e1c38c22e541aacb6b7b3d961fa367", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660521, "uuid": "c06435fc-4ccf-4b26-800c-86da2dfe5e95", "comment": "Malware payload (Mirai)", "value": "3e8162c0c78d95ef77a84e522ff1b098b68ed856f6d2e067b703aae47002ce42", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660521, "uuid": "1141e56a-1e6a-4036-852a-d6454e6e8411", "value": "T125C32802F98584FCC0CAC1340B6FB63AA976F1DD1238B2EB67D4AB123D4EE615E1D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660521, "uuid": "1d7ed1b4-2b41-4627-ae5e-836f4f6cd155", "value": "3072:e483TghM/1weZbcnITO1yosFAIxnJdhgpDb7BhDzYrIzQHAdojgaR/X:eH3TghM/1weZbcnITeyosFAIxnJdhgJQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771660521, "uuid": "e105c0e9-7d1b-422a-81fa-51c18c08e32a", "value": 125472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660521, "uuid": "682caadf-973d-47b1-b533-e2d2ed18ee6b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abbe7b48-0efa-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771660521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660521, "uuid": "b96a26c1-86c1-43fd-a602-19748843db91", "comment": "Malware payload (Mirai)", "value": "3b2970aec03eb3e87950bda60d776a29", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660521, "uuid": "c36d40af-e04d-4d25-81fe-ddd242adeb3f", "comment": "Malware payload (Mirai)", "value": "84025726a27b01f08c454f661b1f966c05cef7552ed9c72524e0420a33be27f0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660521, "uuid": "407cca79-1eff-4139-9b2f-3b8609780afc", "value": "T101E34D9AF402DD7EFC0BE5BE44670E15F93093A13143172E529BFDA3AC311A61D26E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660521, "uuid": "ea460d90-9a78-484c-a8de-7b92208597e4", "value": "3072:VmmyBVk2SJgv+av/Yks8s5ReAv/JF9QUrT7BI1mR:AS2SJgWqs8RgJF9QGu1mR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771660521, "uuid": "90272f0a-e7bc-4591-a059-2992137bd8e8", "value": 146880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660521, "uuid": "2d3cac5c-9430-4c25-9fa5-54f0870fef2c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acdf6436-0efa-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771660523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660523, "uuid": "662a12f1-5aec-4630-9fed-6c9ad8fcae00", "comment": "Malware payload (Mirai)", "value": "034abaa673a8e8c86ca8e4aef20dcdbb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660523, "uuid": "df273b2c-b8b6-4d78-ae9f-73b3af83dcab", "comment": "Malware payload (Mirai)", "value": "efddb5e4468f85e68dcc96252976d1d262cccdc3161181403442ec3a088439dc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660523, "uuid": "c48447cc-1cf0-480a-ba5b-a28b0c97bb37", "value": "T16CC39E32D8396DC4C1945434F8B1EE711FA1A5C441A25EBB1AE5C97900C7DA8FA0EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660523, "uuid": "57682461-3a98-4a2d-8e1a-d4f2c8d75104", "value": "1536:qaZwsA5XjVZJK0twtfXd/GW25UhMMJNu5xWKRZwMQaX4jnOsKigXIQSUwrVr1vwq:qf5Z5Z98XdmVMJaiaX7ziGSUGfIwEi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771660523, "uuid": "a7b72478-b389-4926-bd0b-6b02bc3ec2cc", "value": 120332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660523, "uuid": "d8d08a22-5294-44a8-977b-2a32b91be48f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad89eaf9-0efa-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771660524, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660524, "uuid": "138ca82b-c950-43dd-838a-3f5e0d3f6559", "comment": "Malware payload (Mirai)", "value": "83a4b0e05c430a86f61ae9e2ceeb740a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660524, "uuid": "0dacfbf4-214f-4480-925d-6cc3061f9cb7", "comment": "Malware payload (Mirai)", "value": "95fbdc6caf22b98bc0023d3d5221dc76836d5e6bb9da54064eff1643c5555c30", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660524, "uuid": "5f59ec64-c89f-4d53-b5ad-987b56b822ab", "value": "T194343B45EA418A13C4D117BAF5AF418A3332A794D3DF730699286FB43B877AF0D676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660524, "uuid": "06718930-e232-4f9f-9bc8-e2aaaf8aec31", "value": "6144:LYoHI9SHOBzabKacEK1dAnJd7oHf9ihM/9hAU:LbESuBzabKacE62JaYG/rJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771660524, "uuid": "46d33a91-af74-4b0d-9d8a-219e4f4cfcfb", "value": 230960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660524, "uuid": "c3c4fe4d-e0b3-4472-bfb3-d0a02fe46b09", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b759c58b-0efe-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771662258, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771662258, "uuid": "b102f73c-92a1-42bd-87d8-32a6d0544af2", "comment": "Malware payload (Mirai)", "value": "c8a866a143079951c282431df3fe9931", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771662258, "uuid": "be779d45-002d-4551-b56f-4f034d035148", "comment": "Malware payload (Mirai)", "value": "6079ea25296385cfe96350ee7430c77b8c2fcf765bd0e9934b88ab664380fa65", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771662258, "uuid": "c75ba4fc-d89e-4599-8f15-fcc695284f29", "value": "T12B519CAA02448F71DB4986AE67F575B4B10FA0D3E7EF8B08A944499D4FDBE4C2285F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771662258, "uuid": "37520b98-39af-4243-a373-d7e887810b2d", "value": "24:4N2JMkWbiB81uZnE2EnE2EhEmS0bwVYJUfXIhM3+:4N2JMkWbiB81uZnncvyw0bwBIhM3+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771662258, "uuid": "346c1787-cdf4-430a-a91b-e3518acf8c3f", "value": 2881, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771662258, "uuid": "cd79bc43-c4db-4929-8a8a-b9163dc1c170", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2843d226-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771663018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771663018, "uuid": "0c864e82-4973-4dc7-ad97-95b675d82729", "comment": "Malware payload", "value": "5ea3839ef4effebf0c57e18742d1d284", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771663018, "uuid": "457dbecc-2bd2-4ec3-bb47-743856337d4d", "comment": "Malware payload", "value": "64d671e954c370655d61855ba22381f9bbd929ac713322765686619cebeac480", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771663018, "uuid": "330b2b7d-f378-45e1-9cb6-d8dd15e75270", "value": "5A831229135414EAD62681F1D3FD1F84AD591F69CEE2EC157C12BC99EE333AD2CC2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771663018, "uuid": "c31d2056-3349-4e98-85a4-8c1ce1655140", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uo:yYI0ARqw1qAEv7UIFM8oJorFquyjkRke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771663018, "uuid": "1d0fc8bb-564b-4a6d-8cfa-84b58b4f0ab5", "value": 83984, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24c33aae-0f02-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771663730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771663730, "uuid": "337bf7c9-e7fa-4c13-b629-46a7e4719711", "comment": "Malware payload", "value": "0b9761e74b727c347df9a4c41bf9d958", "object_relation": "md5", "Tag": [ { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771663730, "uuid": "eb3789eb-01ed-483f-86fe-3ba7f41cbd5f", "comment": "Malware payload", "value": "854e92d967c6d8e8a51797e43663301dbfb81d2c559a70eab495726af8d66eeb", "object_relation": "sha256", "Tag": [ { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771663730, "uuid": "24086665-d078-4e0b-acb7-1c9eeb22a93c", "value": "T19A31498FAC97602047A3E029567BD0247876901B36498488B66EC161AF642F9D2E3B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771663730, "uuid": "b1c77e41-879e-482e-bf72-4a95d0944b90", "value": "24:rOQRW8dX5htHqyiqMYTR97oMT8XgSefD2WDs1V0rq2Rn:dZHrPPffZdDY6n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771663730, "uuid": "f5d8eae3-afe7-45f1-baab-f387e5d0b055", "value": 1811, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771663730, "uuid": "d452789e-a65a-444c-9ddb-3d5e44ad39c0", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da05352b-0f10-11f1-8369-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1771670047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771670047, "uuid": "4d59b46a-d339-428f-a891-945036ae9866", "comment": "Malware payload (Vidar)", "value": "615a5e0d5a68d4d9ac75d09e9cbb89f6", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771670047, "uuid": "70bb9b5e-76a3-4b02-bb75-15db4d2432b7", "comment": "Malware payload (Vidar)", "value": "39ba0b6c15ebbdb2678f86d4f14994ca240882bd76086feac1db50e88071d1cf", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771670047, "uuid": "ff197b9a-a667-4494-baa8-c897b6e5f8ac", "value": "T1B1F56A076DD5CDE9D086E239E47222A5B234780C03317BD71FA1AEB41E75BC8993BB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771670047, "uuid": "23a9f64c-aed9-4ee1-8bb7-04d8d91595c6", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771670047, "uuid": "dae7f14d-2c51-493b-aff2-fb16641d9aee", "value": "24576:7pqUuu2mDc0ZyDRyI4iyxc5bMpz80wJeBbSAchelet29mqnkybey:7pqtvmFZyDgxGbMpzQeBfN1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771670047, "uuid": "fba18f2a-998f-4db4-b69f-803e5529a17b", "value": 3348992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771670047, "uuid": "cb1efe15-9e6f-47cf-a0dd-cde7108c83be", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a3100c8-0f1f-11f1-8369-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1771676168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771676168, "uuid": "de3e00f5-6269-4830-b6f8-ceb2a4b170c5", "comment": "Malware payload (CoinMiner)", "value": "91ec4b1dada88f63b349d074d438c29c", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771676168, "uuid": "db7baafd-2ef4-4d52-99ba-eb41a47633a0", "comment": "Malware payload (CoinMiner)", "value": "4aced9a213a250581b513534a9fb1e8a81bc85f55b6a8b7ccbabe8a56a668c4e", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771676168, "uuid": "abb4eceb-2ed9-4eeb-8164-103703b63a1e", "value": "T13CF5335B959280ECE067C771857F8FFD632B394507C02FEB22DAA0186B61FE67670A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771676168, "uuid": "741ecee3-5355-4f64-8440-be46dd6e164c", "value": "3641b918fa6fcd6b6754b75fd2065c00", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771676168, "uuid": "ca75880c-0b4f-49e5-90fd-1251592acff4", "value": "98304:xOPivOFei+kbey+Ad37SwZ4XkicYtE9XRj9p:xOqHzSF76XZcYaN/p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771676168, "uuid": "a65f40be-7478-4a15-955f-70a235ba4c90", "value": 3443512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771676168, "uuid": "81d2a080-61c8-4cea-b1d9-e8dc71445b57", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6fbbe672-0f25-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771678888, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771678888, "uuid": "4d46d79d-4082-4494-8d08-93afbb1f3774", "comment": "Malware payload (Mirai)", "value": "cbb893612cad8355c2fd3ed18dff47f5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771678888, "uuid": "5f7a3f3a-de81-44ea-9ff3-b3911cd6edd8", "comment": "Malware payload (Mirai)", "value": "97e7da873f089f55ebd52c023c4d2de4d1f6280d4aac44a0b3550f4df1d90777", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771678888, "uuid": "53d528d5-a0c2-4b38-a9d3-c1e0606686e3", "value": "T1C513F885BC82567BC2E023BAE6AE558D33A273E8D2DF7217C9111F007B8551F8E67B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771678888, "uuid": "9ec0f72d-4976-4174-9e06-6fefc57524b5", "value": "768:zpbDXCSu/qJGjcfnMMS+H7O8iHi15Cq9kgvXZixF94KUNgMDI/NU:dXCH/8GQL7O6vpixr4KUNse", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771678888, "uuid": "5f2d784c-bf03-404b-b402-7d45343136d0", "value": 43616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771678888, "uuid": "c356ff7f-99f1-47a1-b7df-b684123ec13e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6cfa6af-0f26-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771679464, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771679464, "uuid": "fc4882e5-45bb-406d-ab45-9d51ae5e8aa0", "comment": "Malware payload (Mirai)", "value": "512184449ac881021170c9bbf60f1c9f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771679464, "uuid": "b8b68eb7-5613-419c-a3e7-941e69c001ef", "comment": "Malware payload (Mirai)", "value": "0b1540d73b8836527b42950fd3b074600050da2b9d9d1810fdc9990c52d92c1b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771679464, "uuid": "fa7e465f-6d45-48ff-aca6-abb42aac27a2", "value": "T16CA3F606BF210FF7DC6FCD3746AA170629CC690A22B57B763534C928B54B60B4AE3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771679464, "uuid": "a7629930-7272-4a92-821c-d34c5c69fe93", "value": "1536:ED2iD17tc6l+pSt6Tk4V621Bfyj4NyMO/46ZhzV4EndicxgrjB40W:E6iZ7tc6l+oncyi6VNiBFW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771679464, "uuid": "db43786c-3dfb-498b-afc2-9a4670e4b0c9", "value": 105676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771679464, "uuid": "e1b58624-056e-4c31-bff7-c3fd044c4593", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2a8d9c2-0f27-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771679860, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771679860, "uuid": "896466b7-9d6e-4d56-9748-aaef004f9273", "comment": "Malware payload (Mirai)", "value": "2c75fb2ebcd253ad69c7ce16b8d38935", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771679860, "uuid": "0ed160b4-dee7-4f19-8ef3-1cf6df47914c", "comment": "Malware payload (Mirai)", "value": "d1af037c28a4f16f7a602bbc03201c10d391a1a179cdbb6a4967c65ad8a6542d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771679860, "uuid": "db7fe5bf-824a-4147-93f2-59a73ba0ac6e", "value": "T16E831A95B8818B22C5D412BEFE2E118E3313177CE3DE72129D206F24778B96B0E779", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771679860, "uuid": "0edc4853-e5d7-495f-9721-ec9305a6c9fe", "value": "1536:0GnfqUi8ckoXeBB9ycpZfvjaCLMtMQ7MvPiG+sghtIH7gr5FGYi1:cU/Mc2cXfvjaCV+sghtIHErvGN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771679860, "uuid": "1290fd3a-a0df-44c7-9b55-b570bd1a9b9c", "value": 84796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771679860, "uuid": "acb80651-a536-4af3-b791-60b3ea2659ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09970e0a-0f28-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771680005, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771680005, "uuid": "0ce05010-e976-4943-b9d5-c10ec677353c", "comment": "Malware payload (Mirai)", "value": "1ca250cef90d06c97c3de552a7f14f09", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771680005, "uuid": "eb6075d8-06e1-4545-966c-6bd6bcc08eac", "comment": "Malware payload (Mirai)", "value": "c6f7b78504e00504c2aa9c0817ba60c8ecbe9a1f6bb66ebf020422a9e954543f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771680005, "uuid": "41e6dfa7-8ce7-4cae-ada9-85ffb4786a62", "value": "T17FF33B46E6418B13C0D6177AF6AF42453323AB64D3DB73069928BFB43F8679E0E636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771680005, "uuid": "b7bda950-70e3-494a-97f0-deea172ed55f", "value": "3072:JJFC0OZ4HeZa8Ee8x8PB+ztB4I78i8JSGLPSvOM/9P8WF:JJFHSZa8Ee8x8P6tf798gGLPSOM/9EWF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771680005, "uuid": "908ce8d8-ad74-4107-8c19-5d3ed699dbb8", "value": 160228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771680005, "uuid": "eb3fa0a7-838b-481b-9dbb-4df33d10ce49", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a3204bf-0f29-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771680543, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771680543, "uuid": "3bf53547-5bb0-4f25-8477-4ff672d3c38a", "comment": "Malware payload (Mirai)", "value": "6869c4a2b1c87b4f653679af7a0a39d0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771680543, "uuid": "e3a4a279-ece3-4dc4-8133-9d554a73d08e", "comment": "Malware payload (Mirai)", "value": "d62f134d94a5c679ce8c3c07388c649a5aa19913866ec315b6a5bebd0c35dc3a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771680543, "uuid": "d9553c48-266a-4cd5-8d88-00930d643413", "value": "T142E32755ED819F05D5D526BAFB4E928933231BBCE3EE7112DE205B2523CA95F0F3A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771680543, "uuid": "46edbf74-cebb-4b88-b850-8d44c32664a3", "value": "3072:Ad0z7aSsJ+hXLeuZfa56YIBtDhVJDfx0lfGId9rxVKOiqVQ:hNsoh7e0fa5hIBtDhVJTx0lTdVxVKOiB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771680543, "uuid": "6382f331-3f60-4c6b-9d09-f1304d040d80", "value": 145244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771680543, "uuid": "526a35c7-0dfe-488b-86fa-8c4570ac0f8a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4258d46-0f29-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771680748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771680748, "uuid": "45e55c2c-4469-4388-a0ae-7d009d6dc5f3", "comment": "Malware payload (Mirai)", "value": "1ed2ff263b6aaa021737466638b8153d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771680748, "uuid": "10550627-5e8c-4063-b4f9-df8c8d0a2c9e", "comment": "Malware payload (Mirai)", "value": "1671d49a2de65ee40707a1a06ef1ebe6d952c858182159344e3126a065da7977", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771680748, "uuid": "5630e11b-6a9d-4b26-9169-76452b1eec3c", "value": "T193833A81B8819623C6D122BBFB5E018D376653A8D2EF7307CD266F21778B81B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771680748, "uuid": "e403dcbb-6468-44b5-82b1-7af75f092233", "value": "1536:AzIvNFJ4q8p6wfqTG9W3x9IOCZOh2OiuHRXHyBR3avAA:AzIFFnMk/IOC8hZS4p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771680748, "uuid": "d6fad801-ac99-430b-a09d-cb5673b48f32", "value": 80896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771680748, "uuid": "1cc42aa2-86ae-489b-83f4-5bf8f4d579ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7338a4e8-0f2a-11f1-8369-82aee05be84a", "comment": "Malware payload (GoProxy)", "timestamp": 1771681042, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771681042, "uuid": "291850cf-8ef0-4aa4-a457-a5191c81d98e", "comment": "Malware payload (GoProxy)", "value": "84a537e811238d23277776a22a3e9640", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#48c16b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771681042, "uuid": "4a79dbce-5244-4206-aacb-51c411bf788f", "comment": "Malware payload (GoProxy)", "value": "29d6f962aada496eb5c6c7ceef66648a18a83072894b25bc62c99f92de315b1c", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#48c16b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771681042, "uuid": "10871fb0-a9e3-4c9c-92d8-8f2126aa8557", "value": "T12E664B03ECA555E4C0A9E2318A679152FBB17C495B3523D72BA0F7382F72BD0AE787", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771681042, "uuid": "05edc4c6-6db6-4034-8c1c-c04fef72c461", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771681042, "uuid": "b7ef396e-18b6-4d5b-8ed4-4e15de0148c2", "value": "49152:4/i/8kscDBLemUve/7SUA+1eo5Q4MtynLX4kKLr139iFZ+EjUBP9sqSYfKiK9Kvk:4CIs5AL4hLXhU+CiWb13TdEt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771681042, "uuid": "c22127c3-ca90-42fd-9020-e2e7a726cd8c", "value": 6575864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771681042, "uuid": "b490dd6d-6d8b-48d4-b83b-71422a700fd6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff74fcaf-0f2a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771681277, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771681277, "uuid": "ad0cc286-c003-4dfa-8272-6c5c8417e69d", "comment": "Malware payload (Mirai)", "value": "2259bd64276cd75689df165e581a2834", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771681277, "uuid": "e4e42777-3b80-4aab-8749-023bf07b0a93", "comment": "Malware payload (Mirai)", "value": "8e068e79d1ce6f5b9b51a19fc3f85f902e26248e8b4229344c8d638d688e661b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771681277, "uuid": "5d6ab0b8-a5ed-4e0d-a84d-5df52ce40985", "value": "T191534AC4B683D4F4ED6605711137F7374B33F43A412ADACBC76AD922BC92A01EA562", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771681277, "uuid": "262ea020-a9c5-4fef-b519-6bfcb8425ed1", "value": "1536:jhtDsvTotU5JOSC56+iGysXWdDug4aCZTwR+E/iuRQcfKSYh:jhtQrotU5JOj3lXrgPCWR+Q5RMh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771681277, "uuid": "35a30719-10a4-41b8-b004-6f018809bf09", "value": 64144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771681277, "uuid": "a1e934cd-0410-4668-88a1-a5429fb3f59d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88c69326-0f2c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771681937, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771681937, "uuid": "d50b01a2-a9ea-4b82-a3c0-6f63cc5af1d3", "comment": "Malware payload", "value": "75f7cecdb401818e255c8ef883ec8f2a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771681937, "uuid": "25e14e47-f6b7-44cf-8c54-70054a26d700", "comment": "Malware payload", "value": "58461e7ed92962e1999c1cb45f80c8d9142e0901cd3c9fb61b1e9dd51e548f3e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771681937, "uuid": "f44f0508-f450-4af9-a090-2b4a0d61b406", "value": "T1578309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771681937, "uuid": "75cdf09f-735d-4fcd-bac5-ad5e9818e584", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnrWaoVN/:XEKltp9txAX/yr2pbrW5VN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771681937, "uuid": "07ff6100-013e-4d32-adf3-b74e7a4811f6", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771681937, "uuid": "c59ba581-792b-45b4-8ac8-12269130d562", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ff468f6-0f2c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771681976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771681976, "uuid": "c3400dd8-583c-4fd6-a3d4-6843e1a92694", "comment": "Malware payload (Mirai)", "value": "aea8c77669fdd2070beb2aa8d6e48a33", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771681976, "uuid": "ebeac0d0-0ed5-4430-b94b-d94840a7a353", "comment": "Malware payload (Mirai)", "value": "17a1284d76d076af7e59a21ceca3effc02247422f6f5cfe74929c59ea96eab00", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771681976, "uuid": "293608c8-f420-471c-9c2a-ffc6a8af6cdd", "value": "T1A2833BD7F400DD7DFC0ED77B44530A0AB235A3A116830F36639BBA67BD361A54866E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771681976, "uuid": "2182aad1-875d-42c5-82fe-d3f8c53106d0", "value": "1536:aNk4IK4uAy4ZsbwuKLwFkSY28FyucLf2vaBlZTq9vP0dIeM5awe2AR:aNk4IKRAIwUFkSYNyucLFBnTKQM5a52o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771681976, "uuid": "6ab9a494-dfbd-4ef5-a6b5-9a0728b695d3", "value": 86916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771681976, "uuid": "31834a35-6b73-4e5d-92d2-7f7c75b463ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cdc7ebde-0f2c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771682053, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682053, "uuid": "6dced814-96aa-4514-88f4-8ba8a09dccbe", "comment": "Malware payload", "value": "56381771064467827d370cfa4b9345a6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682053, "uuid": "010453eb-9913-496f-aac6-53eb8b41ce63", "comment": "Malware payload", "value": "523f63f848c1ff5b1e807598241004b43eefc9ec16b98628266135bff5819d44", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682053, "uuid": "27de9e6b-e55e-41a0-b915-f042947ddcf3", "value": "T1CFF31B06EF950EFBD8AFDE3705AC0B4725CCA54312A97B793178DD28B60A54B4AD3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682053, "uuid": "31029eb9-e13c-4ddd-984f-6676bb0939ed", "value": "3072:XedRcZTkFeMCKTgv3/AO5RLIB9tN3eXTGTcYta9z39tUc:Xgc9kFtmTLU9tNuCcY873U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682053, "uuid": "3d3b8ed6-7fc6-4672-b4c2-e4fc88f99d4d", "value": 163776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682053, "uuid": "5df0599b-8b48-4946-92d8-5c7b73042a7b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8af856a-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1771682293, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682293, "uuid": "b274f3a4-e63a-4db5-bc38-8f720f96dbe6", "comment": "Malware payload", "value": "91904c76a5d6e973a8015a716d5943e0", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682293, "uuid": "fa7dcd5d-73dc-4459-9476-fd9cab87c85e", "comment": "Malware payload", "value": "a1c7e1a0b84f6ebb45e91fdd79ec9b9c8d6d80b1af754c72a1952aff4674c209", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682293, "uuid": "cb9641f2-8487-4d2b-9d00-bb6488b36bb4", "value": "T12305E184F5E11E27E487823F9B8246770166ED1FB349C317574866BBB8BEA34EB153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682293, "uuid": "e07b95aa-ba0c-4c18-a2e6-cdb223a44599", "value": "12288:FHkOsP1QHc0R9HaVc/fQZ0CShw6P/5cNDMsm4gO8/mRQbLv:FExepQi/fQZQ7x0O1Xvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682293, "uuid": "94266a10-76fe-4043-bc9c-2908e8ca4211", "value": 848048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682293, "uuid": "a434f913-af5f-4ac1-a884-cbc50be30f3f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682293, "uuid": "224b6cbb-919f-407e-9f9f-07491677afa1", "value": "t189217143a83f9f3ad5a2d8b0dc6a0725512b5702b4f9e7109f3ca9d06c7a016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cae4e4b-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1771682294, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682294, "uuid": "68ab44e8-7f5a-4846-ab25-9a1eade1707c", "comment": "Malware payload", "value": "936b35bfee8232f437bf6b46e88401dd", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682294, "uuid": "08ad3d08-086d-4b20-8c48-7790e580b99a", "comment": "Malware payload", "value": "de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682294, "uuid": "5553d838-7f07-4016-9503-376fe075477a", "value": "T1B9356D56F9808EA2C5D8177BF75D835833134B78D7DEB102CD08672877AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682294, "uuid": "589e2078-e64b-4472-8159-27f8843006d9", "value": "12288:E8dASOYRNCAJump208iJftl7zmnSrlcaUxQ5TVFQGl9eLtRajZa6ZTxIVD7bLv:E8dbbsO38+TfgRinIVvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682294, "uuid": "319c97e3-7d15-410b-b0b8-ade3f2c23480", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682294, "uuid": "d05b301f-8f1b-4744-986f-7d466bc971ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682294, "uuid": "10b2e768-e1af-4986-9ca3-da19d010015e", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1771682294, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682294, "uuid": "dfb8b899-6a1b-4f7f-b925-a848ada97b2d", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682294, "uuid": "9d9f0f4c-1de5-49fd-b4d7-24b1a0d0f2f2", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682294, "uuid": "6d56d465-4e42-4edf-9037-95e8a88e4c8d", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682294, "uuid": "02788c1e-4d29-4c6e-aa69-c038e77d8171", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682294, "uuid": "8de41e55-7cf0-434b-8ff6-1ac54613c486", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682294, "uuid": "301e36c8-ed05-42bd-a943-622813918cd7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682294, "uuid": "6ea1e501-5b3a-476b-91b4-490eb473e509", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fa7ce9e-0807-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1771682295, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682295, "uuid": "5a1ac1ef-7d63-4b47-9e91-cdbae465483a", "comment": "Malware payload", "value": "df64a5c787f34c5b38c8103a67e3d97c", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682295, "uuid": "b0bec445-8470-4d09-9ba6-fd9d54bb642a", "comment": "Malware payload", "value": "6f1bbcaa6efc41ee257919a85acc9ea5b1f82c8def103e39629e0b5161800ccc", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682295, "uuid": "541d4af1-135a-413a-8f0d-97a2a85fa69d", "value": "T11D356D56F9808EA2C5D8177BB75DC35833234B78D7DEB102CD08672477AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682295, "uuid": "06735bdf-d591-4b05-af70-f42bc042313f", "value": "12288:sQFoCapOujNJ7h8SYIhU1wwy7zh36bV7CIBolbVtE7ZdXjboyjBNY3v9fQbLv:sQFbJi5Pa/CbmzotVqv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682295, "uuid": "fd9696f3-98aa-4fd3-a073-f4e3bda5035e", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682295, "uuid": "7e80fed1-b7f1-4d2e-b072-6a6336064caa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682295, "uuid": "68f2bbe7-c7f8-4e2c-84c7-7043325c0e3d", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3ea0263-1a77-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1771682301, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682301, "uuid": "8fb411ec-3739-4279-a6b6-b64325940004", "comment": "Malware payload", "value": "567d3249dbe60fa9478a424a69c2c535", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682301, "uuid": "f437d689-8afe-4297-8629-6d6055767e34", "comment": "Malware payload", "value": "ff70c53dd6e9806c588d8f78ee35d406db0879bf5419a18a87c7982c79e3e9bb", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682301, "uuid": "eaa8ca92-2fac-4ab5-9e57-4b1b6d18a2a2", "value": "T19F05E184F5E01E67E487813F9B8246720266ED5FB34AC317574876BBB4BEA34EB153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682301, "uuid": "a82eddbe-1b3d-4952-a33f-c88d15841f0a", "value": "12288:BZpdDbfRWxSYOkwVcqcMFT5G1z6EtYOyDIGOnd7w4bLvVc:BHlb/KwiqcMFUzYP8GU7PvVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682301, "uuid": "5e681243-ae69-4fa8-871a-0d54f1384c82", "value": 848048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682301, "uuid": "23a2bf25-06e2-4c95-8ac0-c2dbe08e56d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682301, "uuid": "cd4e65a5-a035-42ab-98a5-09dacc4f3d9c", "value": "t189217143a83f9f3ad5a2d8b0dc6a0725512b5702b4f9e7109f3ca9d06c7a016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d564360-0f2d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771682347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682347, "uuid": "a79f380a-1cba-4b75-b116-9a5915e8c06c", "comment": "Malware payload", "value": "d2c4845c3630ed796f263d92a02715b5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682347, "uuid": "8ccecbde-b8ab-45ed-a570-abbf112470e2", "comment": "Malware payload", "value": "483bf6173773228d01fcc5a2f214c77e52d689a80117a9f31ac0aa74802f1164", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682347, "uuid": "bebf7639-f80f-4a31-af3b-38f8f6ca600b", "value": "T13824E1E91283CE07FA2525357527077CB4874048FD44975FCB69F4AB6208FBACE969", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682347, "uuid": "2fdee49e-8662-494e-a66f-9b843b0d9d79", "value": "3072:AgMZx61G9UuCVyER1yHj08kozJYHMlTg2wk/gvWbXlR4mrvoGmyqaFl5RyA3j7vM:AgMZ7JCV7ROg8kozJo+FT4q3g2MA38", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682347, "uuid": "afd2fac6-a32a-42d1-aebd-991e910d7f48", "value": 211017, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682347, "uuid": "25cd4707-21c9-4346-af6e-4aa65a18316d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4870026-0f2d-11f1-8369-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1771682467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682467, "uuid": "9231e66e-66e8-4624-8718-08925481c353", "comment": "Malware payload (AsyncRAT)", "value": "51ce62f62ba5e2f424e8954893e6d815", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682467, "uuid": "fabd5a46-948e-406d-8486-1de3f7405ef0", "comment": "Malware payload (AsyncRAT)", "value": "794790e9f8d17da9a50e9387b76c0d78d8a7d2af33ea75e9159089917ab697c2", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682467, "uuid": "43c2bb46-f93c-4170-bd9d-b1995b936a1d", "value": "T194247C16B76951FDD1A7C5B4C9434942EA32388A4B60BEDF07904BB67E236E89F3C7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682467, "uuid": "3abe0e60-bbe2-47f7-a555-f3f0f5dcb6b4", "value": "183388b096f04db8679b00d085f87f72", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682467, "uuid": "d0857564-6af5-46a9-9418-e34213d423c8", "value": "3072:SkY8yckIfPJWifvyA3yP+ITv57bbOb6Wt1dNYVO9YHhi331erwgEs9Hb:8cVp/3yrTNbbObbfme31erhP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682467, "uuid": "8e90aebf-dea9-4dd6-af38-f5cff8b8e06e", "value": 225831, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682467, "uuid": "df246ad6-ea3b-4080-b103-b84e810f6a5f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8d68c1a-0f2d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682554, "uuid": "39cf5b49-f053-42d4-b369-eede9e4e3d33", "comment": "Malware payload (Mirai)", "value": "897270f8c399f1b0d9c6a8319bb741a5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682554, "uuid": "059c2c9b-ef71-4816-aed9-222a85b2a39c", "comment": "Malware payload (Mirai)", "value": "45112c11d5784f6368260c5919119755c0316869d0c2c5c3eb6f4337a7be8df0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682554, "uuid": "1b0eb526-4347-4629-98ce-1724411b3627", "value": "T196A3D80E6E218FADF369863047F79A21A39933D636E1D645E16DD6001F6034E681FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682554, "uuid": "f89ad8d6-c84e-413d-b30b-2ca4e340b2ff", "value": "1536:OuJsiWa96HOeRDmkV55/8QQRm/mC6KCHJBcne121HYaQaF/K:nJRWa96HOMDnVsQ5mCrCHfqYvaF/K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682554, "uuid": "88f0ec5c-26e0-4a75-aa1c-50cafdf8730b", "value": 101580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682554, "uuid": "533b4643-87c7-48c4-baf9-0e449ec498ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "783bd8cc-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771682768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682768, "uuid": "b759d9d6-0610-4c37-ac84-312a1f52f3c0", "comment": "Malware payload", "value": "bbbe2f5baaa792d68bdcea0620a09131", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682768, "uuid": "046fd0c2-5afc-4b1e-beec-94c0712288a7", "comment": "Malware payload", "value": "7b1b6d592304b0019d586e9879f0a179c97083774f1a45517a083daa7fb3c852", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "f69ff70c-5036-4357-9735-04a9218c9fda", "value": "T1236171860A9443397C95952AFAE88B583994F653DBF17FD9DADC3CEC858CF086090A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "9ce1ad97-d143-469b-b3c4-94d05856d931", "value": "96:Uns8s8asvs2sFsosQs7sMspsRs2sysIsw:AFfaUrQVfi7auL75P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682768, "uuid": "14de57db-908c-4d5f-b528-ccd10f932f53", "value": 3194, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "ae745a56-e30a-439f-b7db-005c946ebd9d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78489038-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771682768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682768, "uuid": "8c971e67-f436-43f1-a452-b91961d3f764", "comment": "Malware payload", "value": "e1b4f06e073d132a13cfd19347e0399c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682768, "uuid": "fd0eadae-0eaa-4e24-8664-0e308a21b736", "comment": "Malware payload", "value": "4958d312870cc240592ec5e299a07c5f5edf53c82214e407582c11abdb57d07f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "d2b064dc-1c0f-4217-9f17-e4adc30901af", "value": "T11AE092FC3CB0383C14999411A7F10D0072559193C4754EFF4DC8D8A848CFE0865DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "c9c29214-380d-4860-957b-32993a2bbebc", "value": "12:v0FpEFNivEFNdeCEadefmuEwoIElNl+EbEUEz:UslImjPl+EbEUEz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682768, "uuid": "f3832f3d-daa9-4489-9d0d-acedcb98f14c", "value": 425, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "025ecb66-7c30-406c-934c-1354371f344a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78639a75-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682768, "uuid": "0a4773bd-c5a3-46f2-86f4-56f1b6a3539d", "comment": "Malware payload (Mirai)", "value": "9e1ece581502521f9cb02effb09728e4", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682768, "uuid": "cccd583d-9f03-4f04-bf83-30c8e919e374", "comment": "Malware payload (Mirai)", "value": "02d4ab1628866dcd55b2d582d4929746e1227572aa153cdaeeb9c791d2714831", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "8c24aea8-b825-4984-884c-0c8f769a88cc", "value": "T1A0333ADAB902AD7DF98BEABE80170E0AB23123541053073777EBFC937E321549956E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "dfc27c75-7aca-465a-abf1-a326aa0f5543", "value": "768:mLGOe2kf9e9X9nberzI2vcv/QP3w5gFHviPuzWeHXpi2UJTMDnH638g7T:mL/4f8F1eB0ApFvimzpZi2UJanHY8kT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682768, "uuid": "ae67f5e5-c44f-4b2d-95d1-a1dd713cdc2c", "value": 53056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "3da2ede4-a795-4497-8d2c-3fa10317f393", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "786689de-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682768, "uuid": "2edc1c92-2dfb-423a-822f-b9eececb91b1", "comment": "Malware payload (Mirai)", "value": "343810524772237b5bee55bff499cd6e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682768, "uuid": "2f787854-35a0-4f3f-9212-fb6d249c7d1c", "comment": "Malware payload (Mirai)", "value": "406f574a647e3b9aa36563bec97678058f13a42f1ecb5c7718f8bc3e8191c5bb", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "0e844dd9-8add-4c72-90c2-37f6b6623d82", "value": "T1FF63B60ABF615FFBE8ABEC3705A91B0525DC551B21B97B75B930D818F60B20F19E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "ab8ca0f7-1eeb-4424-a5c6-b7b48be5d4fb", "value": "768:Hq+6axwcz9s7HLIIOqoYL6wLX3rPAVSK6PNQ90xh5rteheaXeJdhde5XiYINF96U:Hq+6aWcU6wHP0SJPHhLo7Xedh46F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682768, "uuid": "1cb4c3bd-aadb-4797-9eed-3cc0f5a72e79", "value": 71684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "8cba14c2-9b0b-47c2-a501-4537de668856", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7873b0d2-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682768, "uuid": "44dcf9da-df1f-42cf-b4a2-0f97d6091cdf", "comment": "Malware payload (Mirai)", "value": "22afbd39779284747f22ec80c998249a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682768, "uuid": "fb9d6718-28b9-4bf6-a11a-d7b1ecd7d30b", "comment": "Malware payload (Mirai)", "value": "c7d119608afd33749ccedbdda9ccfdfbbd272aff1cc4a0f109fe4f59b01c1e0e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "83beb543-009a-40fb-8bb3-a9c2aab5abe1", "value": "T1CB233AC0A683F9F1EC11457C307BA7726E77F43AA03AEDDBD7D99423A84160296072", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "16179e57-9c60-4ba1-a331-b32cc40668a3", "value": "1536:Ovmt6GStZRjrMcPzOubNIyooPDdgYfQ5I00mv4amr:O5GS1HMcPCuhAoPhg7iqvjmr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682768, "uuid": "800716df-126e-49d0-b99f-32657c0cb869", "value": 49852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "4e585863-dce4-474d-a825-1cc11460ac90", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78775ebd-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682768, "uuid": "daf1c55b-9934-48bc-aed8-2a17223407e5", "comment": "Malware payload (Mirai)", "value": "ee16a19040a3774e7141ba9babad4687", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682768, "uuid": "34f28625-8abe-421d-bcac-5a21ed609d52", "comment": "Malware payload (Mirai)", "value": "0c290fdd82c692e0a13404fb034d0266bd947ea22d4293058a03adf5e7683900", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "26e42e14-ac55-45c7-8ac2-959b9353418a", "value": "T10F4308817881A626C7D05377FA5F018D33199798E0EE33578C296FA07B8AD1F0D6B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "4ed2944f-a291-4ace-bc5c-e400c43c07f8", "value": "768:30ESWRYSaG0wBXAy9abThYrB2dPsnjVB5uEBwLRzqmPrqlhH8qkJSULwCVy/rCxE:dSaP0waejVMqYIcJ8fhWfM5tMd7oHm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682768, "uuid": "de32836b-9da6-42ee-b974-1e29ad641758", "value": 56880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "ececb5d6-d21f-413c-9033-aece2ba5edb4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7877a9bc-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682768, "uuid": "810abeb4-53f8-4b0f-a15b-b29a897ea576", "comment": "Malware payload (Mirai)", "value": "265854627981ecffa2fa534ecb97b76a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682768, "uuid": "6ef1498b-acad-45a5-90b7-b88ae15652a9", "comment": "Malware payload (Mirai)", "value": "4ea799a432b7074f32caf654fb4823606849f03b3db5ebb6ecf89eaa99f67264", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "cbfc173d-3526-48b3-ad3a-e14fb5cb4fb2", "value": "T154C32B46EA408B13C5D61777FAAF41453322DB5493DB330689285FF43F87A9E0E67A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "af88fbec-5b73-490c-8ee2-c0decf800691", "value": "3072:v8PXmy9MV9JXM9fN30yDShgFKeqBaXCwrM/9JwA/:EPXmy9M2T0yDShg4ezXCMM/9JwA/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682768, "uuid": "a0529c81-4197-4cd6-9f79-ab5f021184d6", "value": 128880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "947f1e26-2ee8-4969-863f-d425aa44f931", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "787883ef-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682768, "uuid": "8bc94e0e-2d82-44c0-a0e9-dd2bb03f0390", "comment": "Malware payload (Mirai)", "value": "4c33158d09a2acce6bbe0e1a4cd035e4", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682768, "uuid": "d9ae09f3-e7ae-4e73-96f8-dfc4a1dbe2b6", "comment": "Malware payload (Mirai)", "value": "d8b120cc14af396b361dfb6095b0534cbf0a0443c79033672b87c37ba303568a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "6d8f43cc-c63c-4feb-863f-ec17799205a1", "value": "T14A530A85B8819A25C6D113BBFE1F018E3316975CE2DE73128D145F647BCBD5F0E2AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "25bf9670-336f-4ba3-8383-ecafa0444192", "value": "1536:YdnWpBh3cLDNoATqHjjO5yAMQ1fonWmLdI8niD7noKWp:lH3+po+qHe4XQtom7noKWp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682768, "uuid": "6a5c93b9-0eb6-4c84-b1b7-d5d98333d77a", "value": 66688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "06d285b8-c069-4e8d-b57f-348b66171827", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78801ed4-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682768, "uuid": "5074f0a1-8191-4bcc-863e-993a98bcaddd", "comment": "Malware payload (Mirai)", "value": "3ea14cef4a99c08a1a64dac3a59cc090", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682768, "uuid": "ab86573c-4586-4d41-95a0-0f3ca8314465", "comment": "Malware payload (Mirai)", "value": "b1faa0f492d25dfbbfa7f332553d1663dd89f7d2bf50b1b31362e4ab8be1fe76", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "f0d7552f-35b4-4204-8497-0a656121e1f1", "value": "T111332B027228494FF9D61EF0393F0FE093AFE98024E0B585694EEB458676F771586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "01617d80-5e6a-4e43-81f2-a38e3ca7d0f7", "value": "768:opgPdUwOe1Po/7wni3RiAPSnPfDPK32JjcRlgaizjrvVwipnpBX9QeH3:D1FOe1Po/kcExm9Mai6wvXeu3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682768, "uuid": "73d7fdc1-ef38-482d-a485-c1446f8234a0", "value": 51604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682768, "uuid": "fac671f7-284d-4496-93bc-0c5ddd8e352a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78848f9e-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682769, "uuid": "5a82913b-554a-4f81-87ad-281950c802e6", "comment": "Malware payload (Mirai)", "value": "bef47e8e31b4f250b80febd533743b34", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682769, "uuid": "eca36d72-0126-4d93-87af-2e26dba16f52", "comment": "Malware payload (Mirai)", "value": "ed8c9b58c3c7c3fa8e4ad81621fef106fedf05e1a8a47d58707b1e3100eecb83", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682769, "uuid": "4eec9eed-bc69-4d01-9672-52b078addcfb", "value": "T19C4309817891AA25C3D053B7FE6F018D3315979CE1EA33538D296F907A8AC1F0D67B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682769, "uuid": "a2942dc3-96df-45b2-a571-eb6001c0b09e", "value": "768:9Zus2SsIUGSLUvMgBF5aNuBO5njhINiItmr5/i/FJueY9aAU7wCVy/rCxHghW1/d:H2qbSLUxmjh9UFJur9NvhWv54dN/Yo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682769, "uuid": "b5e7230c-222d-43a3-92bd-79d25c81ef40", "value": 56928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682769, "uuid": "e04978c6-97dc-4dfa-b591-291ff700c56b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "788539d2-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682769, "uuid": "fa6ff6b2-a4fe-4457-af0e-29583f5c8adc", "comment": "Malware payload (Mirai)", "value": "6874b4a91507faba39960da6009eeac6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682769, "uuid": "c5c2c7da-4880-42c7-a24f-1a291aa84221", "comment": "Malware payload (Mirai)", "value": "d51b31122fb3943f321913736e638e54b1e7941da03ed188dda24877a154ff0c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682769, "uuid": "dd6d571f-f251-4f38-bb83-76932c5917e7", "value": "T1C4432925AD792E26C0D8A57A21F78324F2E2624D25B8C51A7C720E4EFF04B4065577", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682769, "uuid": "0d01ae6e-cf31-4935-ac03-9f006fc3dfb3", "value": "1536:iYHSJfH08KRlLDGYO5SLbbwCHJMeh7VwuCHmtU4U2WG:3HSJfU8KRlLDbf7p1KmtFWG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682769, "uuid": "68d99af9-612f-44de-835c-68afefa77be6", "value": 60404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682769, "uuid": "091a4546-31b2-49fc-ae45-8d69e1befe67", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78869dda-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682769, "uuid": "715addde-20a3-4eb2-9d6b-64da22f79d02", "comment": "Malware payload (Mirai)", "value": "e8adc8c7bd4655a5408e3bbaafc869ec", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682769, "uuid": "b82badf3-c737-4935-a221-bc7b573d7bb8", "comment": "Malware payload (Mirai)", "value": "1a7957eb6b1afa16b1af5afe71cdc4115a47e25cd1c9dfd9dc3142728c055b21", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682769, "uuid": "8e844759-35f0-4e0d-a7b4-ba89fb996b3a", "value": "T18163A71E3E218FBEF79C823847B78E21965833C626F1D5C5D19CEA015E7064E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682769, "uuid": "e68dcdc2-083d-4d10-8f1f-354a4c29bd04", "value": "1536:oK9MrYw4WbUlgczk90vjAUyTryOUZQ7wPAqCm:oKCrDmvz40L1yVUZQ7+Afm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682769, "uuid": "494c28d8-3d8f-4af9-a4bc-b9bba27eaf76", "value": 71684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682769, "uuid": "c93c9cc4-eccc-4b4d-a5a7-62eedb1861d8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7886be27-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682769, "uuid": "44e279fe-10af-4594-9bd4-827587072ae7", "comment": "Malware payload (Mirai)", "value": "52497d0622797d8d1fa0b2ea55bd3a09", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682769, "uuid": "21b3d768-2efa-487d-946b-d540e60a00a4", "comment": "Malware payload (Mirai)", "value": "f8a59156fc0f576ec64a129827568aae53df1a8b19e256de90a76cd402ac21c4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682769, "uuid": "c797e2e5-cdf3-422e-9f31-3ad7cd3c1936", "value": "T1DC337CA6C5BDEDA8C1144A78BE158B389763F000C6632EFAD744865A9047EFCF2197", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682769, "uuid": "91253556-33a9-4829-8122-f75cff9411ff", "value": "768:cavxawtyybR71sl7ebmj2uZPLwKXE/FUIVfEw6MluPB/qUCBbKo2tcCvV:caZawtLe/PLv0/+UEX9PB/qUKp+cCvV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682769, "uuid": "a23caa46-aa75-41a4-9604-18476f4546bc", "value": 51616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682769, "uuid": "0ce5b666-7f18-43f9-a3a9-8e6962ed6ca4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c9c1991-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "202d6e80-d93a-472a-bb09-9433178a868d", "comment": "Malware payload (Mirai)", "value": "86ecf1b145452c46eb9e3b9223f25d03", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "7c571881-0e94-4c3a-8574-261ad1017c6b", "comment": "Malware payload (Mirai)", "value": "12aaec864d4bc1acf303440373cc12e5d2c03afb412b6f2a6b6121a62effad64", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "85607a9b-1da3-4732-a155-f78510cc1796", "value": "T116C32902F98584FCC0CAC1340B6FB63AA976F1DD1238B2EB67D4AB123D4EE615E1D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "e510810b-1ec5-49ad-a27b-5ac873b20841", "value": "3072:e483TghM/1weZbcnITO1yosFAIxnJdhgpDb7BrD3YrIzQHAdojgaR/u:eH3TghM/1weZbcnITeyosFAIxnJdhgJf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682829, "uuid": "293be07a-f645-497b-9044-41fa6cadd7d2", "value": 125472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "53364d24-574d-4716-9ac3-97f9f21a5dc4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c9c915c-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "7c9b936f-4bf4-41f0-bd03-7d67454a945d", "comment": "Malware payload (Mirai)", "value": "9fda82ef9e9789dee48981372da85db8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "7f86db30-8b35-4d1b-868b-582cecc05818", "comment": "Malware payload (Mirai)", "value": "b67cfa9f4138e4707188e3705b126fd359f13188ceec03b5b411e93db925cf07", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "7cd1e13d-4277-4802-ba95-0155167c8995", "value": "T1E1C39E32D8396EC4C1A45434F8B1EE711F61A5C441A25EBB1AE5C97900C7DA8FA0EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "ffe15b16-71e5-471c-9aaf-927b8a5377bb", "value": "1536:qaZwsA5XjVZJK0twtfXd/GW25UhMMJNu5xWKRZwMQaX4jnOsKigXIQSUwrVr1vwN:qf5Z5Z98XdmVMJaiaX7ziGSUGfIwEl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682829, "uuid": "35cfe5c4-1e4a-401f-8f93-e1e8ef16caab", "value": 120332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "8b2f72a7-4328-487e-9581-d81ccc9d2de5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c9f8c0f-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "772a0582-e841-4bd2-966e-a63e2ccfe746", "comment": "Malware payload (Mirai)", "value": "8903600bc0445ad02d2e75d5f6520a12", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "8fc2f1c8-44e5-40a2-8a4e-f1cc537aa5f7", "comment": "Malware payload (Mirai)", "value": "3fcf1aab8bf6c5f11eeb1999929e3ae28899b23b5a19d0ffdeae65f93e285e2c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "4b4f909b-ee4c-4c5e-a5f0-0be068296fb1", "value": "T12DF3B50E6E198F7CF79987344BB79E32965833872AE1C582E16CD7105E6024F641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "56723e1b-7e45-4f7c-9272-f8e48afc6cbe", "value": "3072:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJBQX/uw9EfszRpSP/Q4vkTTzTT4BFZDiw0:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJ2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682829, "uuid": "0372a360-8028-4d66-a497-c4c339bc380f", "value": 171724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "9cbe55e4-8789-497d-831c-36e6c69e4024", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ca42442-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "e69c5151-b351-44c4-9633-92006248d9f0", "comment": "Malware payload (Mirai)", "value": "790aa690d1b3fe5db9596659f77450ab", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "64b64d8a-e9ee-495f-975d-9b6c67700ce1", "comment": "Malware payload (Mirai)", "value": "a89343f69199ab0abef08825d36a7fce39e1f1703d4575f7955f1017174c513d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "68d84919-7725-4437-a9f4-0f8dcdc415e8", "value": "T140343B45EA418A13C4D117BAF5AF418A3332A794D3DF730699286FB43B877AF0D676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "858d6bd2-fa60-476c-960e-25e24205ae92", "value": "6144:LYoHI9SHOBzabKacEK1dAnJd7nHf9ihM/9hAU:LbESuBzabKacE62JVYG/rJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682829, "uuid": "432543dd-91e7-4775-b02a-b8b7f7acee11", "value": 230960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "71b9307d-7392-44bc-826b-55bcb2e92400", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cb43743-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "710c6d7f-3368-4ffd-a83a-845c9a109523", "comment": "Malware payload (Mirai)", "value": "7e8822e5034f4578fe1d5c2784e911d3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "f57270d2-2cda-4761-b418-f2edfbbdb25f", "comment": "Malware payload (Mirai)", "value": "ba59f38e0228f339d2d5aa8aa291b16f669d6a777cf81470a0f8eb29e6746c11", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "b1e19e2f-b13c-423d-8e0d-6b3fa8706d50", "value": "T102B339C1BA43D4F5EC1641307177F73B9A32F0791239DA87E7A89E327C92A419D0A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "b0e01ad8-84f0-40c9-977c-f11620f2e1e0", "value": "3072:PbKW4dCLFaGFBu3/45g1rcV2w+zSr9bMFfli:Pbj4doYGFB0/45gdS9uli", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682829, "uuid": "425798b8-a81a-45e7-8300-22c0e132a47c", "value": 107824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "edcf793b-1e29-4a7a-8c92-28e6a9330cb7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cb72da0-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "542c6674-503d-4d73-88ca-8466b59888f2", "comment": "Malware payload (Mirai)", "value": "63eb72866cb78c45666f9ef41adf6925", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "43a041ec-6bbe-4443-a35a-b6de17f74c3f", "comment": "Malware payload (Mirai)", "value": "bb565d0b91f2606bef1d2aadb3a1028f27e06543cfafaaf81dac1b37f381a33c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "9885b932-29a4-4775-87da-616eb20c03e2", "value": "T126E34B55B8828A22C9D513BEF92D018E331327A8E2DF7213DD105F2577C7A6B0DB7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "556b096c-2974-4c5d-8b6b-e483a4ad9912", "value": "3072:ENcMOvrpToDzK7rMeQzlue1k6aU9zL6EiueCo2k/:AOhoDzKnMereS6a4Iueck/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682829, "uuid": "ae986b61-87d0-4c92-8180-dc9cd6b30bcc", "value": 145536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "683b5dcc-622f-43fa-8913-338d9da50f23", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cb8cc71-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "3caba206-985c-4755-a2fa-f7cb09e6e6cd", "comment": "Malware payload (Mirai)", "value": "24c1b7bcdd62b3122f508c76624fd1f6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "bf04cab2-1de5-4c64-9253-43bc4cc0b3b8", "comment": "Malware payload (Mirai)", "value": "102953d53f168e51bfebbc0c7ba8711ebe99272e7cc08b3d54f25c1d926f766b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "2bd3e69e-b0d3-4db6-8ec3-de706bc2cd18", "value": "T1B6D34A2275391E2BC4D0A87E22F74361F1F167DA25A8C90E7EB20D4FFF252206547A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "6c9b5639-6845-4b51-a78a-a2e49043aa71", "value": "3072:1CldeCsOs9kzj2vV44qURgyPykV30Qm9Jlsb3jL4:wPeCK9kzivVjqAymymbTL4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682829, "uuid": "cd40600f-9b61-4cca-8124-870967557282", "value": 140776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "495a28af-462b-44fb-b21d-880aba5c9012", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cbabf3e-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "2cc462c7-9235-4337-b416-c6c09574582b", "comment": "Malware payload (Mirai)", "value": "e572119c7eee43c75be0dbc4581297df", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "3f201e46-2206-4a1a-b8fc-7312f0bf36e2", "comment": "Malware payload (Mirai)", "value": "f77c5cc3351a8b67bfa01be97fba663a92dc648bdfef1fab0ccfe0e35b30a8c7", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "6a4cd49c-dc76-4b3b-915d-b97b2cdb73fb", "value": "T164D33845B9829A27C5E523BBFA6E018D332563E4D2DF72178C215F217BC681F0DB7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "42e324de-fd54-454c-9f63-b6f941b9149e", "value": "3072:8nFif7apx6XS+kUgpjWX60yMgcWOgc6ZzyQSL:8n8ZS+dQWX60ydsgr+QSL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682829, "uuid": "4a13774c-9566-4c6e-86aa-900c9125b2cf", "value": 140756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "0e2cb4c1-9b51-492b-bcf9-850e2e47378d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cbbae3d-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "7b10b582-7960-434f-b513-38766a94f8a0", "comment": "Malware payload (Mirai)", "value": "d6261c4a24e8a863a19735750c363be3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "f6395cda-9891-4d86-afd6-db9417f70443", "comment": "Malware payload (Mirai)", "value": "a79ffb194371518ef9806d98e3dd8c8d5df7b8e360ca60d5184f9456d820a3f4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "d76d52ef-ddcc-42ae-ae0c-cf895fb26ced", "value": "T1F8D35C0677180E57D5A34AB0263F1BE083FED5D121F4BA89291F9B6A4672E3B5481F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "be1b7c9d-d44c-4724-812a-0d327a0a3a81", "value": "3072:JUFczWKNZhc3JiwmS7ZHr2Um/u4SM89tk/b:DvNo2kdr2Um24SM8Pk/b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682829, "uuid": "37b164b5-4613-4a58-8319-b527b7765cee", "value": 134328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "11536e34-587c-4f76-8c56-35d3b9f0d8e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cbe28e9-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "8ebc534d-58ce-4763-a52f-0c914765ae0a", "comment": "Malware payload (Mirai)", "value": "3c0089081564a7cafa69869c51784e83", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "c7bb192c-b182-4cc3-b144-4418bf3c9aa0", "comment": "Malware payload (Mirai)", "value": "e767209f9dc78b3eace14c87519126bafaa55c61866dcb2d10bab6f6330122f1", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "402bd2b7-4176-46f2-9124-aff43301652f", "value": "T1DD93E551BC82562BC5E423BAF6BE668D336577E4D2CF722BC8214B217B8551F0D63B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "61609b88-de3f-4fba-88c1-600b62bc19bf", "value": "1536:pd+dGSq/lv/d7rMbIG4WetuLadxi0cbrT9KM5cZiw+bY4d:f+dY/lub6Y0WcZi9dd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682829, "uuid": "38e562f7-1ae9-480b-a7f4-b248aeab29c3", "value": 93792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "4e5a04f1-b09a-44d8-a214-88e0f8c7b84e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cbee47a-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "bc37897a-c790-43a7-b472-8710657db843", "comment": "Malware payload (Mirai)", "value": "a90c5af50cb167c89dca86c0b1925c98", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "ecb8b908-c9d7-424c-8a19-5a3cd93cda89", "comment": "Malware payload (Mirai)", "value": "bba3a4ecc7bd341e3ec8039a6bf8461f9a6076e6d409f94cb57a799498000de6", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "b0d320bb-0810-432a-b0d6-0b99426f1227", "value": "T148412AD8276206756D519E6676F68B85B380554BDCC2AF885BDC34FC444DE0C3CABA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "7cc72fad-5881-454d-a577-da6edf25bcf9", "value": "48:vrCurJprjPrjbrgUrGs1rzUYLrq/KdJrR0krVNroCrZe:vz7Xj3z3LbHnLM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682829, "uuid": "ce24e196-2bf6-4bd1-87d7-ccd2b9302737", "value": 2056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "4b7648cc-d8ac-4075-8218-d862497b0cd2", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cbf0f39-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "19d63df0-2971-4c19-b6cf-58018e3dbd14", "comment": "Malware payload (Mirai)", "value": "ec640a959f99d1150acf2adb4c218d57", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "d9a5b9a1-f65c-40da-bf24-d0063d779602", "comment": "Malware payload (Mirai)", "value": "1eb39eca4d19e08915c2b7e03943ba6eb0f08cfd3486cb56cc3fd604d40a01cf", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "481fe3ba-4239-4c6b-bd69-32abaffb59a5", "value": "T1D3040905BF110EFBD89BCC3B45F9270529CC581A62EA6B36B934C858B54B25F1AE3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "0852db48-adb7-4447-982a-a107032f7961", "value": "3072:t60NrtUpT/5dltGgXGGP9M4S8lrXwU2woAKFLYV0fCtZ1SD39rsJzjM9fx49SY2K:t3nEr5dfHPq7UTo7FsvR9X0l6m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682829, "uuid": "7e08aac0-bc7f-49ca-8157-eb92a0d6fc6f", "value": 179916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682829, "uuid": "46225736-2ac9-4b92-9639-833d4380c11e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8f07727-0eeb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682887, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682887, "uuid": "6a5dc027-d7ea-4739-9725-48369bc9751a", "comment": "Malware payload (Mirai)", "value": "1a5d508436101b06458772b47ed744f2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682887, "uuid": "341a11d9-ae3d-4d92-ae3c-890d52661b30", "comment": "Malware payload (Mirai)", "value": "be057d7310293c3687d3e233fb1c2c792fc980854527b2afed5031ebfbca0bb2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682887, "uuid": "99a630f9-2d8e-4f37-b208-87ffb2218553", "value": "T16B6166AA057206B67CD14A92BA7CC11772E1E79A51C65ECFEFFC38EA504CE1CF2405", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682887, "uuid": "94d355be-e050-481f-91a3-766eb60c71dc", "value": "48:i55x5SNSK95rR54z5qr5if5M6MV05R3ROw56zL5zzJ5on5S75jp5NGU5GI/:ihoUK93E2a+0hQLvIinCUx/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682887, "uuid": "7956f92f-7513-40a2-bee3-82e63e07d102", "value": 3284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682887, "uuid": "8bc69c30-a70f-4941-88f2-23675af37a14", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf491f23-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771682887, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682887, "uuid": "4fa6c59e-5dbe-49c2-87c7-28daf8786cf7", "comment": "Malware payload (Mirai)", "value": "f9db1765abc9f47eb79b44591cab6872", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682887, "uuid": "6de1f13d-0082-42f9-92c8-f27925347ffb", "comment": "Malware payload (Mirai)", "value": "fb19a3de3e37a30631e716cbf12badfe336ce1dd164f3463e44648589b196d5a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682887, "uuid": "6b6568bc-c3e5-47e2-9eee-9c186046d224", "value": "T14313F14E32784E62EF7978B884AFB79504904A4BEF964C82DBD1333957C2F11B61C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682887, "uuid": "260fed0e-bd90-42a3-9606-0c7e75793ea3", "value": "768:/zDT+5mfT/P0B4e92Q5m99YrBLuqKC7iA67rquN/mLmS/6UIlSVnbcuyD7UHQRjs:/a5E2xDG9yhJ70H/QmSOinouy8HyQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771682887, "uuid": "d9c1bf0b-3a5f-4f1a-951b-a5631199bfbf", "value": 41832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682887, "uuid": "edd93ef0-6071-4afa-b06e-624657042d05", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d56c68ec-0f2f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771683354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771683354, "uuid": "279e56ca-72dc-4282-9164-12f92077f0bf", "comment": "Malware payload (Mirai)", "value": "dc40821e3716e2b96dd9dc604a1a6f68", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771683354, "uuid": "bd9fb184-9392-4c2e-9780-328f5da0786f", "comment": "Malware payload (Mirai)", "value": "30dcdff07d69f03664c68b3b5158a9a97c5a9762a93f4e4f899752c12ab55dcb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771683354, "uuid": "786701db-ef21-4127-8c5b-9f67eed59b3f", "value": "T118639E72C82A6E58C19981B4F4B18FB91BA3E44082571FFB26D9C175E083EACF6453", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771683354, "uuid": "a1cd033f-9b3f-49df-b6e2-615f7e3bc8c8", "value": "1536:XnwtQIb8cY8GQKE0KdhjY2xM23WCFelbfIrA:XnSb8cY84E7dzxM23WJtAE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771683354, "uuid": "2a29157b-3ca8-4e97-abc0-68c05406b1b9", "value": 68288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771683354, "uuid": "c0e3259c-ed47-4fc5-ba5c-17630afb7938", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9934af95-0f3b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771688407, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688407, "uuid": "1426a692-b015-41e9-82e1-56ec607fbf23", "comment": "Malware payload", "value": "582a7c40ef24b3b8a784fd28f6c8b4ff", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688407, "uuid": "b5a1a37d-761d-40fb-853b-ca03a3b9eedd", "comment": "Malware payload", "value": "812ae323f5fc148ad1c2d341cb6be4f7c68f0da58a71e629e69c55d3f6b59efb", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688407, "uuid": "2837271e-a020-4726-aa9d-36719d56d5a7", "value": "T1E6B012C04CA3D3103C3323676939915470B052890240FCFF97076D7FB944AE8989E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688407, "uuid": "fce85e4a-62b6-49d0-8430-60b5bab7d809", "value": "3:lP/ErUscC8QEGzILsZ18P53ynLg7W7K4:lP/ErUschGzIwZ2pyndK4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771688407, "uuid": "f1363aa3-24b5-4c3f-ae1e-b58fc80b33e9", "value": 116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688407, "uuid": "a06da897-df59-4170-b97e-6c7bf63d1174", "value": "application/x-wine-extension-ini", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "993f4903-0f3b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771688407, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688407, "uuid": "8aedf222-88fe-4156-b3e1-6c15504e84ed", "comment": "Malware payload", "value": "bceedad94604946f131aec94cd1cc576", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688407, "uuid": "b82b7bac-7441-49da-978e-bde3680f9615", "comment": "Malware payload", "value": "ac96f69de7ba8c03041985e27e277597cf7b4779a9f64fc701d10324823e33c9", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688407, "uuid": "8a403101-57b0-45c6-b265-83edcec4c043", "value": "T1F6553332361151D4D868E846EC50899EAB6FE0A7BF6E4BF5ACC7E729C45F1D03D80D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688407, "uuid": "334ffd99-92ad-47f0-8f5b-cdef92d4a0ae", "value": "24576:p1/zqO3RUpvjGtoBTS1G5WhWP41Yg7XowPmgqc:p1/dBqbTSM0hWPHOpXqc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771688407, "uuid": "17a82aa0-ce14-4f98-948a-f0b7a402f3b5", "value": 1324076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688407, "uuid": "80ef5f1f-1ecf-44f3-82c4-5ac46b9e3d24", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9941ccc1-0f3b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771688407, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688407, "uuid": "5f84f61c-8ddb-484f-8c8a-9034b9b63557", "comment": "Malware payload", "value": "6144e2627dbeea201f55fc4b533d2675", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688407, "uuid": "8b71ae61-c14d-46e9-9653-aad3f6c1b0c5", "comment": "Malware payload", "value": "034f395c925ffec9275eed37e3c16c44ecc11f790796d7c21186993a997a0753", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688407, "uuid": "534046bb-cf69-4861-8885-6eddd42b004d", "value": "T141D02B0F0549573079ECD85E4BBD34C931890663B4039DD572A273334A6A83AB7432", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688407, "uuid": "1f819e90-8cec-4263-8835-f58f4b534c98", "value": "6:h7xYxnpDTw0yGmOJHxsecL2MohsmJjL2Mohsm5M1MR:v+DTFHsuhxJ6hxSi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771688407, "uuid": "abb10deb-61e0-42e7-95ca-ad5a57fc97c4", "value": 264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688407, "uuid": "34469345-7271-4d38-8b8c-97dbd5b67ce5", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9956c259-0f3b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771688407, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688407, "uuid": "0cecbdbd-da16-41c8-94b6-40c6da815823", "comment": "Malware payload", "value": "a8f818f07c2d6edb0f64f2d08ed81676", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688407, "uuid": "61a2bc9f-030f-4190-ad27-c3f7a4b344ca", "comment": "Malware payload", "value": "580132d692dc9dc849d0083e6d2e98d215d999f326da420be1641a47bce431c0", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688407, "uuid": "0b8a4d31-736d-4c40-aae4-885ffb66cb98", "value": "T1F041E16D3F5099A803449F6FBB37A2D0E8926DC7D6E2B4899900BA84FC81B2385857", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688407, "uuid": "37c9fa44-4057-4e3f-8e7e-a25ea4c93865", "value": "48:Or5b+A5HVNS+/zuyg3jrwguBHdXiGjJytQOOG7RgL4tFRB:Or5KmVNB/CpHGl4tFRB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771688407, "uuid": "5307d8f1-c634-42df-9a09-5961bc379089", "value": 1997, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688407, "uuid": "61c45ce7-74be-48e0-a812-3297260ec97e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9caaa133-0f3b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771688413, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688413, "uuid": "be432f6a-65bf-4e91-9595-03d723e763ea", "comment": "Malware payload", "value": "07ced22e4bb36b5e177d6ec6719c71b0", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688413, "uuid": "a03fe8cb-15c2-4b19-bfb4-02a722f30b2c", "comment": "Malware payload", "value": "2d5f9da983fd0265de0de6e228393386df74a1127f5ad3c0ba68072674ae0109", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688413, "uuid": "bf65e386-b967-4801-847b-2cc7184c0d60", "value": "T146073323C22EF8D3C876E37CA4F5EA06CA1FDAB55366674E5A3521805E825D4C31E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688413, "uuid": "e4871f2f-e4cc-40a5-82fc-76bd27c12233", "value": "393216:ggmgnjHv2RcBVFq23y9sklve8n2DfUkY3ucN6OvNL43+Sq/P:ggmgjPwc9qx9XlGfDfUNuc8unh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771688413, "uuid": "f0bc0d53-c5d6-4902-b1c1-cada7cd10a68", "value": 16966400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688413, "uuid": "9c2b0784-e7a8-45c4-8be9-5773a2a7f111", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9caf2967-0f3b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771688413, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688413, "uuid": "4b018b04-7d2f-4b3f-8985-bfde15ec6d50", "comment": "Malware payload", "value": "1bb9fa73ed1cb4a6feecfa340ae733c9", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688413, "uuid": "0f80a2e3-77af-4892-a47f-267dbb6baf9b", "comment": "Malware payload", "value": "a957ae42182679d7732fd5ed56be8d14f1694f582e8f1767eddfc6f58ea5efee", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688413, "uuid": "b8f331bf-9f43-4a66-aa65-fc7e9dd8edda", "value": "T18C173323C66EF8D3C876A37C64F5E60A8A1EDA746376AB4F4E3521845E860D1C31E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688413, "uuid": "ab44b048-320e-42aa-a845-ef215dc022f4", "value": "393216:cgmgnjHv2dzfxDNPEVcBVFq23KO2O19sklve8n2DfUkY3ucN6OvNLqq/4:cgmgjPAxDKc9qU9XlGfDfUNuc8u2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771688413, "uuid": "d3e03806-ff64-48ce-96ab-39efdd9e621c", "value": 19145047, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688413, "uuid": "b57eb692-7c4e-406b-87ad-acbb9aeed8a9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ccd20c5-0f3b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771688413, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688413, "uuid": "a5ed9526-0a98-4a5e-8715-76940e1573ee", "comment": "Malware payload", "value": "2dc32430ecf47f145d2eff7cae5312a7", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688413, "uuid": "568927f4-a9ae-4c49-9f84-1a320e926175", "comment": "Malware payload", "value": "fe30fa103e50f646c586afb6cb4b152f35dd7d4d03dc4c13e337ec5430ffbf02", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688413, "uuid": "98806fdd-5fc4-4636-8b44-d1780e2c4b61", "value": "T157273327C27EE8C3C866E37864F1EA06CA1FD67463767B0E5B3661845E864D0C31A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688413, "uuid": "fa2f237b-2e29-4108-86aa-6ed27ab77bfe", "value": "393216:Sr6ipPEt/gmgnjHv2SqXT7cBVFq23JH3t3x9sklve8n2DfUkY3ucN6OvNLqq/E:SGGPEpgmgjPxqfc9qw93x9XlGfDfUNu7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771688413, "uuid": "fb01d124-06a4-46ce-8abe-0b2a66dea6b8", "value": 21185670, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688413, "uuid": "ab6b27c7-741b-4d5a-b9b5-9969dc8117aa", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cf2f087-0f3b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771688413, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688413, "uuid": "fe71908a-630d-4b9f-b18a-0bcfcfb633f7", "comment": "Malware payload", "value": "b685816d35d1201ad1b550ea34712423", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688413, "uuid": "ec9a0f0c-2577-428f-aae3-2570f62d6ceb", "comment": "Malware payload", "value": "bbe7431f9958d2b750b1bb5a5b023500042b95651102c2dba4ee30f6bb7e9ed4", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688413, "uuid": "b4123085-a237-4495-943c-ce952c75f99e", "value": "T14E41001927E64624F3F34E721937A734D63BF8169E42A72D004045041425F15EC36F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688413, "uuid": "7c7f9b57-3028-4a14-9a10-abf3fcc3c395", "value": "48:83kmSJ+dMl4uWnle+d0iJlpglpeAXuHx:83koQ4uWlYYvgveyu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771688413, "uuid": "05c1ce11-79e5-4073-9169-be5ea8a01933", "value": 1904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688413, "uuid": "be2f149c-fe98-4c6d-b4b0-5f29c53b5b47", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8487e003-0e75-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771688416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688416, "uuid": "41e5a316-e04e-461a-bd0e-15a0cf814952", "comment": "Malware payload", "value": "a52ce6fcdeb2516c694ffcdf92f4ee94", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688416, "uuid": "11568d16-83ab-4041-b528-da00fa5987a9", "comment": "Malware payload", "value": "c9561897dd8f6c469aca846f7232028ff132dbc2930aa0a0ad17111bc159d63e", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688416, "uuid": "38540979-b611-4cee-af4f-72e57aa3dbc8", "value": "T1EF073322CA5CF4D2D592B7BC69BED60B610ED68837736E4F473A70DC9C92840875F2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688416, "uuid": "7f351956-7fd1-4178-9255-15167a019f4b", "value": "393216:shhDxAhIN9sSpDHHXCpTMOL7BWuuDi9CgUnbfVdK8:WDx0IN2kHHX+MOBWu6lgmbXK8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771688416, "uuid": "fefe00f2-4212-4b2e-8b06-f43664843aa3", "value": 18048829, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688416, "uuid": "a8bb9125-d063-4c52-b298-54ccbe908c6b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed44e697-0f52-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771698426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771698426, "uuid": "df7e5852-2e24-4363-9576-87ca19765058", "comment": "Malware payload", "value": "e87f9bf6b485dd38bd883dfe66325af6", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771698426, "uuid": "1867814c-dc27-4d8b-8104-6a528bff50d4", "comment": "Malware payload", "value": "5db324f44ff22ed3e882de5e79f67faf2b48f0d41e0117cb6db5bed6896188bc", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771698426, "uuid": "8846510d-ad7a-424b-a4b8-9d298c64b7be", "value": "T1C6D5128F21C07523E48D703FB43D76920DEBACC798A155D1E7C83B6096B1E26EC9A9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771698426, "uuid": "7d4659a8-7896-46bd-886b-e7064b90e3ec", "value": "3d5949e8243345b91e4b8464040d5980", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771698426, "uuid": "83a40990-f662-44cf-8f93-9a8638290dc5", "value": "49152:pkUISqx5JIyWsBdQjoR4ynZfdCX4RKQL1e7hVaIpaMGO1mDbJgX00wWZ9kY1Ph9:pkTJzBGFynZUXZQL1EVTaMQDbJgk0x9/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771698426, "uuid": "ed4689a6-932a-433f-9e10-78042cd60707", "value": 2908088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771698426, "uuid": "b3384a54-09c9-4393-b431-e66a3df53b36", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771632374, "uuid": "23252279-0eb9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.125.214:33774/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771632975, "uuid": "8989b6d7-0eba-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.153.246:38119/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771632976, "uuid": "899d6909-0eba-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.153.246:38119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771633033, "uuid": "ac074646-0eba-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.121.4:40061/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771633034, "uuid": "ac38925c-0eba-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.43.128:52054/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771633153, "uuid": "f381b895-0eba-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.121.4:40061/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771633926, "uuid": "c0630fe4-0ebc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.125.214:33774/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771634346, "uuid": "ba2f87be-0ebd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.94.159:43408/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771634654, "uuid": "7217dfe9-0ebe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.219.116:56402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771635370, "uuid": "1cb9eb95-0ec0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.34.245:39989/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771635733, "uuid": "f5432d51-0ec0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.99.85:57434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771635796, "uuid": "1a81bffe-0ec1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.219.116:56402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771635856, "uuid": "3ea1d17f-0ec1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.94.159:43408/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771636749, "uuid": "527ca92e-0ec3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.219.211:58664/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771636928, "uuid": "bdb4058c-0ec3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.219.211:58664/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771637347, "uuid": "b765a4cb-0ec4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.75.152:38645/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771638075, "uuid": "690daf21-0ec6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.109.167.55:34258/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771638137, "uuid": "8e37edbd-0ec6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.21.140:46572/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771638188, "uuid": "ac8756da-0ec6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.100.220:50624/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771638318, "uuid": "f9be7e61-0ec6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5411854720/JyOpiNX.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771638377, "uuid": "1d5ddcc1-0ec7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.129:45047/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771638729, "uuid": "eecdd7c9-0ec7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.168.0.60:54495/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771638785, "uuid": "106a9557-0ec8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6431051653/64TW6hJ.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771638791, "uuid": "140216e5-0ec8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.75.152:38645/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771638850, "uuid": "37523f5e-0ec8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.27.89:48360/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771638917, "uuid": "5f0da015-0ec8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.134.92:53722/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771639035, "uuid": "a51a0206-0ec8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.240.93:38220/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771639268, "uuid": "2fe9f3ee-0ec9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.51.142:56372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771639574, "uuid": "e6ba1178-0ec9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.231:49336/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771639574, "uuid": "e6c8f201-0ec9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.231:49336/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771639629, "uuid": "078f0bb5-0eca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.26.220:35541/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771640108, "uuid": "2498cd24-0ecb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.147.44:36707/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771640234, "uuid": "6fd5f5db-0ecb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.134.92:53722/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771640234, "uuid": "703c4b13-0ecb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.27.89:48360/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771640290, "uuid": "914fe6e9-0ecb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.168.0.60:54495/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771641807, "uuid": "19494c23-0ecf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.184.112:57219/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771641975, "uuid": "7def5c63-0ecf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.7.175.228:42938/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771642628, "uuid": "02ef3440-0ed1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.51.142:56372/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771642996, "uuid": "ddfe757e-0ed1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.87.118:38961/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771643474, "uuid": "fb4096cd-0ed2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.100.88:39817/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771643715, "uuid": "8b0fe8d2-0ed3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.74.242:58525/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771643768, "uuid": "aa20a0cb-0ed3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.238.16:54402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771644310, "uuid": "ed914597-0ed4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.49.105:35365/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771644553, "uuid": "7e0766eb-0ed5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.184.112:57219/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771644631, "uuid": "acecea7e-0ed5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.100.136:47018/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771644791, "uuid": "0c73612d-0ed6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.57.207:58849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771644854, "uuid": "319a1b50-0ed6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.74.242:58525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771645027, "uuid": "98af2671-0ed6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.100.88:39817/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771645155, "uuid": "e4dce180-0ed6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.87.118:38961/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771645333, "uuid": "4f436244-0ed7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.238.16:54402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771645574, "uuid": "dea37dc9-0ed7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.89.210:40121/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771645634, "uuid": "025a6998-0ed8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.49.193.91:2138/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771646648, "uuid": "5ecbbe08-0eda-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.35.112.154:37813/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771647127, "uuid": "7c9db74c-0edb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/736581456/zd0Oesp.msi", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771647138, "uuid": "82d701c3-0edb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.89.210:40121/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771648095, "uuid": "bd60220a-0edd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.137.214:53691/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771648266, "uuid": "2399020c-0ede-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.55.161.57:42423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771648572, "uuid": "d9d02dc0-0ede-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.73:39413/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771648753, "uuid": "4573e0e3-0edf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.121.87:51207/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771649113, "uuid": "1c6cd8bf-0ee0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.185.114:53325/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771649413, "uuid": "ced42cc8-0ee0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.207:50255/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771649534, "uuid": "177c17da-0ee1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.84.192:47782/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771649548, "uuid": "1f44f69d-0ee1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.35.112.154:37813/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771649649, "uuid": "5c06ffaf-0ee1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.55.161.57:42423/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771650011, "uuid": "3348212a-0ee2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.73:39413/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771650127, "uuid": "78ae12d5-0ee2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.252.100.78:54656/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771650253, "uuid": "c3f951c1-0ee2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.124.27:38388/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771650255, "uuid": "c4e620a0-0ee2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.214.5:46831/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771650727, "uuid": "de255bae-0ee3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.185.114:53325/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771651570, "uuid": "d4e53a8d-0ee5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.84.192:46402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771651748, "uuid": "3e97bf83-0ee6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.207.76:39759/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771651812, "uuid": "6513b6c8-0ee6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.84.192:47782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771652171, "uuid": "3b10c403-0ee7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.163.176:43002/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771652650, "uuid": "585757fd-0ee8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.164:57078/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771653193, "uuid": "9bd9f41a-0ee9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.84.192:46402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771653372, "uuid": "06b6c5e5-0eea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.221.72:48348/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771653490, "uuid": "4cf8fcc1-0eea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.207.76:39759/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771653682, "uuid": "bfe336cc-0eea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.163.176:43002/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771653728, "uuid": "db502f07-0eea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.244.214:38056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654206, "uuid": "f82e0fce-0eeb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://allcheat.netlify.app/opExecuter.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654207, "uuid": "f872fc11-0eeb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://getryos.com/%D0%92%D0%BE%D0%BEtsta%D1%80%D1%80%D0%B5rUI2.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: ryos", "colour": "#51c7ee", "exportable": true, "hide_tag": false }, { "name": "pw-ryos", "colour": "#201b00", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654208, "uuid": "f90079cf-0eeb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.94.92.89/elox3", "Tag": [ { "name": "perl", "colour": "#8fdd56", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654208, "uuid": "f9169b2b-0eeb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.dead.my.id/1.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654210, "uuid": "fa2adfe5-0eeb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.235.116.139/bins/s.sh", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654224, "uuid": "027550af-0eec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.164:57078/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654224, "uuid": "028c9350-0eec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://qploits.online/%D0%9Did%D0%B5%D1%81it%D1%83%20v2.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "password: 2026", "colour": "#a65f14", "exportable": true, "hide_tag": false }, { "name": "pw-2026", "colour": "#4d3d79", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654225, "uuid": "035b5b04-0eec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://194.33.61.20/assets/%D0%A0%D0%B0%D0%B4%D0%B0%D1%80%20%D0%94%D0%9F%D0%A1.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654225, "uuid": "035bcc7a-0eec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://radardpshelp.site/assets/%D0%A0%D0%B0%D0%B4%D0%B0%D1%80%20%D0%94%D0%9F%D0%A1.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654227, "uuid": "0489d1ce-0eec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lunq.revio.live/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654227, "uuid": "049c837a-0eec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://helpradardps.space/assets/%D0%A0%D0%B0%D0%B4%D0%B0%D1%80%20%D0%94%D0%9F%D0%A1.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654232, "uuid": "073b9804-0eec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.144:2344/sysmonitor", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654233, "uuid": "07d79550-0eec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lunt.revio.live/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654242, "uuid": "0da2aaa2-0eec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://allcheat.netlify.app/vpExecuter.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654388, "uuid": "64607b93-0eec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6431051653/64TW6hJ.msi", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654446, "uuid": "86ebc522-0eec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://teamrising.ae/arquivo_20260219172505.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771654508, "uuid": "abd1ed94-0eec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.155.100:41310/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655286, "uuid": "7bb09e61-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.214.30.5/bins/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655286, "uuid": "7bb0a53e-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.214.30.5/bins/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655286, "uuid": "7bb0a753-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.214.30.5/bins/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655286, "uuid": "7bb0aa2d-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.214.30.5/bins/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655286, "uuid": "7bb0bca5-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.214.30.5/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655288, "uuid": "7cdf35b6-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.97.163.167/johenlastgen/johen.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655288, "uuid": "7ce8a43f-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.97.163.167/johenlastgen/johen.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655288, "uuid": "7cf518fb-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.97.163.167/johenlastgen/johen.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655288, "uuid": "7cf536cd-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.97.163.167/johenlastgen/johen.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655294, "uuid": "80a3b0ab-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.214.30.5/bins/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655294, "uuid": "80a3b361-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.214.30.5/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655294, "uuid": "80a3d5e5-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.214.30.5/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655294, "uuid": "80a58323-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.214.30.5/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655294, "uuid": "80a5899e-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.214.30.5/bins/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655295, "uuid": "80ea03b4-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.97.163.167/johenlastgen/johen.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "8218dfbf-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.97.163.167/johenlastgen/johen.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "821c41d5-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.97.163.167/johenlastgen/johen.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "821e4572-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.97.163.167/johenlastgen/johen.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "822e1730-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.97.163.167/johenlastgen/johen.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "822e354c-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.97.163.167/johenlastgen/johen.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "822e46ed-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.97.163.167/johenlastgen/johen.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "822e6be4-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.97.163.167/johenlastgen/johen.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "823a6d1f-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.97.163.167/johenlastgen/johen.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655297, "uuid": "823dc6d8-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.97.163.167/johenlastgen/johen.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655352, "uuid": "a325db14-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.97.163.167/johenlastgen/johen.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655416, "uuid": "c97052ae-0eee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.84.164:44860/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655534, "uuid": "0f5b6f90-0eef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.98.124:58240/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655708, "uuid": "76f56a55-0eef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.24/XBZkmNgBpJqpjJ9.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655708, "uuid": "771581ba-0eef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.24/rfieCkbAGkCDNgcyfdFYrD6.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771655776, "uuid": "9f971643-0eef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.155.100:41310/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771656016, "uuid": "2efcf901-0ef0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.47.9:52712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771657101, "uuid": "b584c74d-0ef2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.98.124:58240/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771657334, "uuid": "40a39406-0ef3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.47.9:52712/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771657639, "uuid": "f5ea5f8e-0ef3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.18.205:52563/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771657692, "uuid": "1600c0df-0ef4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.91.107:43495/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771657822, "uuid": "63259d99-0ef4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.91.107:43495/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771658058, "uuid": "efa1fd3f-0ef4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.243.36:53013/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771658360, "uuid": "a42e12ca-0ef5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.243.36:53013/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771658841, "uuid": "c25499a4-0ef6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/00101010101001/morte.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771658841, "uuid": "c257c9b7-0ef6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/00101010101001/morte.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771658841, "uuid": "c257e810-0ef6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/00101010101001/morte.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771658841, "uuid": "c2612a48-0ef6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/00101010101001/morte.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771658841, "uuid": "c275a8f2-0ef6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.18:35168/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771658901, "uuid": "e62b0cfe-0ef6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/00101010101001/morte.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771658901, "uuid": "e62b24cb-0ef6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/00101010101001/morte.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771658960, "uuid": "09b0ac08-0ef7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/00101010101001/debug", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771658960, "uuid": "09c493b2-0ef7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/00101010101001/morte.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771658960, "uuid": "09cd4711-0ef7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/00101010101001/morte.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771658960, "uuid": "09cec269-0ef7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/00101010101001/morte.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771658961, "uuid": "09e3fca3-0ef7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/00101010101001/morte.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771659022, "uuid": "2e924288-0ef7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.236:35881/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771659077, "uuid": "4f57b74e-0ef7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.82.28:56336/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771659375, "uuid": "00ce7635-0ef8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.30.37:40977/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771659727, "uuid": "d2e94757-0ef8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://stqol819.thornwick.digital/?=check&&actmn=PoVcDVKSaXACdEqZ", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771659736, "uuid": "d80b6448-0ef8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.195.102:60273/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771659861, "uuid": "2249a61f-0ef9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.35.128:42152/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771659924, "uuid": "47fc08a0-0ef9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.222:43118/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771659931, "uuid": "4c97e5d8-0ef9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.153.21:34961/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660095, "uuid": "ae570baa-0ef9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.179.188:55376/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660400, "uuid": "63cf488c-0efa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.91.138.209:36980/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660402, "uuid": "64ddb184-0efa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.18:35168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660515, "uuid": "a8313f34-0efa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.235.116.139/bins/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660516, "uuid": "a8c5955b-0efa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.235.116.139/bins/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660521, "uuid": "abc1842a-0efa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.235.116.139/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660521, "uuid": "abc21762-0efa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.235.116.139/bins/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660521, "uuid": "abc3c891-0efa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.235.116.139/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660521, "uuid": "abc7d4cf-0efa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.235.116.139/bins/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660521, "uuid": "abc80f29-0efa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.235.116.139/bins/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660521, "uuid": "abc822d5-0efa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.235.116.139/bins/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660521, "uuid": "abc9c247-0efa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.235.116.139/bins/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660523, "uuid": "ace84acf-0efa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.235.116.139/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660524, "uuid": "ad9191f8-0efa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.235.116.139/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660751, "uuid": "34d6e3c7-0efb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.82.28:56336/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660935, "uuid": "a2acabb1-0efb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.82.97:51938/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771660997, "uuid": "c796d4ab-0efb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.30.37:40977/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771661057, "uuid": "eb6d2354-0efb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.245.64:60671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771661123, "uuid": "12e03f93-0efc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.6.178:32870/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771661423, "uuid": "c5803eb2-0efc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.195.102:60273/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771661536, "uuid": "08db487f-0efd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.18.205:52563/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771661536, "uuid": "08e24c00-0efd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.153.21:34961/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771661786, "uuid": "9e39b1a5-0efd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.179.188:55376/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771661900, "uuid": "e22fc171-0efd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.94.50:42171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771662080, "uuid": "4d3ce97e-0efe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.140.8:45841/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771662081, "uuid": "4db5e41a-0efe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.106.39:54526/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771662262, "uuid": "b96c90ed-0efe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.245.64:60671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771662262, "uuid": "b96ecb27-0efe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://96.66.24.241:54057/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771662559, "uuid": "6a88fca2-0eff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://96.66.24.241:54057/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771662622, "uuid": "9015524f-0eff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.6.178:32870/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771662702, "uuid": "bfd98f88-0eff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.122.239:49750/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771662969, "uuid": "5f336fec-0f00-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6964245325/RTMbrxA.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "MaskGramStealer", "colour": "#44b235", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771663036, "uuid": "86eae883-0f00-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.94.50:42171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771663335, "uuid": "39226c8f-0f01-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.152:45562/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771663394, "uuid": "5c2a9796-0f01-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.140.8:45841/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771664120, "uuid": "0d2cefd9-0f03-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.157.195:59377/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771664175, "uuid": "2dd76135-0f03-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.157.195:59377/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771664293, "uuid": "7454cacb-0f03-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.152:45562/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771664537, "uuid": "05a75fd3-0f04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.78:46681/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771664655, "uuid": "4bf6b554-0f04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.110:53660/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771664896, "uuid": "dbc8f335-0f04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.110:53660/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771665130, "uuid": "674ae2d3-0f05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.249.96:59619/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771665374, "uuid": "f896bc48-0f05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.114.66:33859/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771665619, "uuid": "8a759a09-0f06-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.83.148:43604/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771666090, "uuid": "a390e431-0f07-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.205:37689/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771666161, "uuid": "cd65d2b3-0f07-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.122.239:49750/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771666267, "uuid": "0cd40878-0f08-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://yzac4fqt.duskvale.digital/?=check&&actmn=MgQLMWlMGgUfHsgb", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771666517, "uuid": "a19bbf4d-0f08-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.216.223.172:42892/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771666758, "uuid": "31373f41-0f09-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.114.66:33859/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771667050, "uuid": "df4e076a-0f09-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.83.148:43604/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771667118, "uuid": "0859c151-0f0a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.78:46681/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771667591, "uuid": "22289364-0f0b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.205:37689/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771668318, "uuid": "d38a1af5-0f0c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.14.131:52139/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771668676, "uuid": "a8ebb933-0f0d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.14.131:52139/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771668918, "uuid": "38f934cc-0f0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.216.223.172:42892/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771669752, "uuid": "2a517890-0f10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.199:57231/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771670049, "uuid": "db4a65c5-0f10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5698774781/vzZaZ32.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771670177, "uuid": "27ab3bb4-0f11-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.71.177.58:45355/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771670356, "uuid": "91d704a1-0f11-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.10.132:41586/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771670474, "uuid": "d84fd966-0f11-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.163:36395/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771671136, "uuid": "62df5935-0f13-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.71.177.58:45355/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771671316, "uuid": "ce53dfc4-0f13-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.199:57231/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771671376, "uuid": "f1c35c36-0f13-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.121.1:52588/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771672282, "uuid": "0e21ef25-0f16-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.163:36395/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771672690, "uuid": "016e398d-0f17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.80.20:51355/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771672876, "uuid": "701cdef3-0f17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.45.176:60030/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771674019, "uuid": "19285fe5-0f1a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.164.199:47480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771674493, "uuid": "33d9314c-0f1b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.155.17.49:54792/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771674558, "uuid": "5a6c03cb-0f1b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.45.176:60030/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771675696, "uuid": "00f2a7f6-0f1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.180.11:36095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771675759, "uuid": "266c2c18-0f1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.107.148:48180/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771675936, "uuid": "8fd312ef-0f1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.55.101:35216/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771676168, "uuid": "1a3cbded-0f1f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.194.152.180/download/install.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771676177, "uuid": "1fcf64df-0f1f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.51.218:46962/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771676530, "uuid": "f1dfdeca-0f1f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://26s1p5ue.frostholm.digital/?=check&&actmn=igyevHRFOhxwmulg", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771677258, "uuid": "a3efd74e-0f21-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.107.148:48180/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771677323, "uuid": "cae37733-0f21-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.11.129:58769/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771677493, "uuid": "2ff40633-0f22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.55.101:35216/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771678037, "uuid": "74343f58-0f23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.55.23:49876/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771678822, "uuid": "486dbfe8-0f25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.193.105:40293/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771679373, "uuid": "9076eb9d-0f26-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.36.163:52613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771679902, "uuid": "cbd80c21-0f27-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.55.23:49876/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771679946, "uuid": "e63b898f-0f27-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://1m82015w.embercore.digital/?=check&&actmn=xPSiwhFqseBEHlsC", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771680143, "uuid": "5b4fb9f5-0f28-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.70.161:40029/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771680682, "uuid": "9cd6ab23-0f29-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.193.105:40293/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771680867, "uuid": "0b3cfe20-0f2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.208.85:33765/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771681097, "uuid": "93fab523-0f2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.36.163:52613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771681217, "uuid": "dc0a6d9a-0f2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.54.182:53467/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771681219, "uuid": "dd0a1a16-0f2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.26.220:35541/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771681582, "uuid": "b58f31dd-0f2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.72.148:55980/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682069, "uuid": "d7e0b1b7-0f2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.158.81:44224/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682233, "uuid": "39354589-0f2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.173.41:45340/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682294, "uuid": "5db9a229-0f2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.196.206.245:39336/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682294, "uuid": "5dcf7e73-0f2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.132.114.25/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682295, "uuid": "5e1b48ee-0f2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.40.112.34:8084/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682295, "uuid": "5e33a5f3-0f2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://86.150.68.134:81/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682296, "uuid": "5ee8b801-0f2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.50.218.234:9301/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682299, "uuid": "60a40f09-0f2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.157.56.105:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682299, "uuid": "60c5bbbc-0f2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.176.132.141:8253/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682300, "uuid": "60fd2f58-0f2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.31.81.229/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682301, "uuid": "61fd5007-0f2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.224.162.132/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682317, "uuid": "6b705653-0f2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.236.182.73/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682351, "uuid": "7f9d6668-0f2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.190.53.184:666/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682467, "uuid": "c490c772-0f2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8532745682/eVLF2SR.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682541, "uuid": "f0bd45a5-0f2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.208.85:33765/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682769, "uuid": "788c1082-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682769, "uuid": "788cb10d-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/huh.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682769, "uuid": "788d6453-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/hoho.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682769, "uuid": "788dd7dc-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/hoho.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682769, "uuid": "7890558d-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/hoho.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682769, "uuid": "7890c746-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/hoho.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682769, "uuid": "789120c8-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/hoho.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682769, "uuid": "78a95c8a-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/hoho.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682769, "uuid": "78b00110-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/hoho.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682769, "uuid": "78b3fcd3-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/hoho.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682769, "uuid": "78bc7d1c-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/hoho.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682769, "uuid": "78c3e74f-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/hoho.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682769, "uuid": "78c7fd35-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/hoho.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "9ccfed88-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.123.145.26/bins/x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "9cd15920-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.123.145.26/bins/arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "9cd15ad4-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.123.145.26/8UsA.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "9cd4e512-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.123.145.26/bins/x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "9cdaea38-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.123.145.26/bins/arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682829, "uuid": "9cdd4609-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.123.145.26/bins/sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682830, "uuid": "9ce0a242-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.123.145.26/bins/mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682830, "uuid": "9cf15215-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.123.145.26/bins/mipsel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682830, "uuid": "9cf8f874-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.123.145.26/bins/arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682830, "uuid": "9cf97ade-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.123.145.26/bins/spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682830, "uuid": "9cfc7ce2-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.123.145.26/bins/ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682830, "uuid": "9cfe5430-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.123.145.26/bins/arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682887, "uuid": "bf23fb95-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.97.163.167/1.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682887, "uuid": "bf3daf2a-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://arilprivate.storexyz.web.id/johenlastgen/johen.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682887, "uuid": "bf4c64f8-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.123.145.26/bins/m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682887, "uuid": "bf51038c-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.97.163.167/johenlastgen/debug", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682887, "uuid": "bf58f007-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://arilprivate.storexyz.web.id/johenlastgen/johen.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682888, "uuid": "c00997e5-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://arilprivate.storexyz.web.id/johenlastgen/debug", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682901, "uuid": "c75d72b8-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://arilprivate.storexyz.web.id/johenlastgen/johen.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682901, "uuid": "c7948394-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://arilprivate.storexyz.web.id/johenlastgen/johen.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682947, "uuid": "e2b73f42-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://arilprivate.storexyz.web.id/johenlastgen/johen.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682947, "uuid": "e2b75494-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://arilprivate.storexyz.web.id/johenlastgen/johen.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682947, "uuid": "e2b75cb5-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://arilprivate.storexyz.web.id/johenlastgen/johen.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682947, "uuid": "e2c4c966-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://arilprivate.storexyz.web.id/johenlastgen/johen.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682947, "uuid": "e2c4cccc-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://arilprivate.storexyz.web.id/johenlastgen/johen.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682947, "uuid": "e2c4daad-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://arilprivate.storexyz.web.id/johenlastgen/johen.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682947, "uuid": "e2cad32d-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://arilprivate.storexyz.web.id/johenlastgen/johen.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682955, "uuid": "e790836e-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.54.182:53467/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682955, "uuid": "e793700d-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.72.148:55980/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682960, "uuid": "ea7032d6-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://arilprivate.storexyz.web.id/johenlastgen/johen.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682960, "uuid": "ea9c0708-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://arilprivate.storexyz.web.id/johenlastgen/johen.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771682960, "uuid": "eaa06f10-0f2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://arilprivate.storexyz.web.id/johenlastgen/johen.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771683020, "uuid": "0eb2907b-0f2f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://arilprivate.storexyz.web.id/1.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771683740, "uuid": "bb56d3ae-0f30-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.158.81:44224/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771683987, "uuid": "4ec93fd5-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.253.226:41369/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684218, "uuid": "d86077a4-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.231/bins/xnxnxnxnxnxnxnxnmipsxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684219, "uuid": "d8f6c234-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.231/bins/xnxnxnxnxnxnxnxnm68kxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684219, "uuid": "d935dfa4-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/jKira.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684220, "uuid": "d9c7417b-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/jKira.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684220, "uuid": "d9c7629f-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/jKira.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684220, "uuid": "d9c7b66f-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/jKira.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684221, "uuid": "da44b5b1-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.123.145.26/bins/mpsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684222, "uuid": "da987449-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.173.41:45340/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684222, "uuid": "da9f651e-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/jKira.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684222, "uuid": "dabdd528-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/jKira.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684222, "uuid": "dabdddce-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/jKira.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684222, "uuid": "dabdddd0-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/jKira.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684222, "uuid": "dabdf1a0-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/jKira.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684222, "uuid": "dabdf95d-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/jKira.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684222, "uuid": "dabdfc8f-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/jKira.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684222, "uuid": "dabe08f7-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/jKira.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684222, "uuid": "dabe18f0-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/jKira.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684222, "uuid": "dabe2671-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/jKira.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684222, "uuid": "daec34e5-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/jKira.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684222, "uuid": "daf1e29b-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.231/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684224, "uuid": "dbd69189-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.231/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684224, "uuid": "dbdc3539-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.231/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684224, "uuid": "dbe2d674-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.231/bins/xnxnxnxnxnxnxnxni386xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684224, "uuid": "dc509a27-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.219.204/bins/jKira.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684225, "uuid": "dce2050f-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.231/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684226, "uuid": "dd66d7e8-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.231/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684226, "uuid": "dd7ed922-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.231/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684226, "uuid": "dd8bc312-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.231/bins/xnxnxnxnxnxnxnxnsh2xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684228, "uuid": "de88cc47-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.231/bins/xnxnxnxnxnxnxnxnsh4xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684231, "uuid": "e0197c06-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.231/bins/xnxnxnxnxnxnxnxnor1kxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684231, "uuid": "e019a74d-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.231/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684276, "uuid": "fb57807f-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.67.138.196/cat.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684276, "uuid": "fb5788a2-0f31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.67.138.196/bins/mynode.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684340, "uuid": "210f10d6-0f32-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.67.138.196/bins/mynode.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684340, "uuid": "2128da8c-0f32-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.67.138.196/peniss.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771684992, "uuid": "a61c8d8a-0f33-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.169:39240/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771685240, "uuid": "3978cdef-0f34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/huhu/titanjr.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771685253, "uuid": "412bb5e2-0f34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/00101010101001/morte.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771685291, "uuid": "5843aff1-0f34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/huhu/titanjr.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771685346, "uuid": "78930ce1-0f34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/huhu/titanjr.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771685346, "uuid": "78930e12-0f34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/huhu/titanjr.x86_32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771685354, "uuid": "7dbdd336-0f34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/huhu/titanjr.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771686689, "uuid": "9955ca29-0f37-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.119.251.139:56165/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771687568, "uuid": "a53a3d7a-0f39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://qfm9nqbc.windford.digital/?=check&&actmn=tgJLvUpPlMgIjOLQ", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771687695, "uuid": "f0fecdd1-0f39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.252.233:59188/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688002, "uuid": "a80c972a-0f3a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.2.87.35:39480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688405, "uuid": "98695ec1-0f3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://implementing-theft-metal-justin.trycloudflare.com/UpToDate.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688406, "uuid": "9879a322-0f3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://staying-heavily-meaning-blowing.trycloudflare.com/non.bat", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688406, "uuid": "989dfbd8-0f3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://creations-venture-traditional-stainless.trycloudflare.com/Colombia.aag", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688406, "uuid": "98edd0e3-0f3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://creations-venture-traditional-stainless.trycloudflare.com/Ecombic.aag", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688407, "uuid": "994a92a1-0f3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://staying-heavily-meaning-blowing.trycloudflare.com/vua.wsh", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688407, "uuid": "99515e5b-0f3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://staying-heavily-meaning-blowing.trycloudflare.com/01.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688407, "uuid": "99528262-0f3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://staying-heavily-meaning-blowing.trycloudflare.com/spol.bat", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688407, "uuid": "996a176c-0f3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://staying-heavily-meaning-blowing.trycloudflare.com/asq.js", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688413, "uuid": "9d171395-0f3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://implementing-theft-metal-justin.trycloudflare.com/NWYRFEB.sov", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688414, "uuid": "9d4bc79e-0f3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://implementing-theft-metal-justin.trycloudflare.com/OSYRFEB.mmg", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688415, "uuid": "9dd9d73a-0f3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://implementing-theft-metal-justin.trycloudflare.com/NWYRFEBaa.sov", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688415, "uuid": "9dd9eedd-0f3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://staying-heavily-meaning-blowing.trycloudflare.com/dokumente/Rechnung%2000019283.PDF.lnk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771688416, "uuid": "9e8616d8-0f3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://implementing-theft-metal-justin.trycloudflare.com/32bit.sdm", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771689011, "uuid": "019b17bf-0f3d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.51.218:46962/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771689012, "uuid": "01b5c5a4-0f3d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.247.164:32877/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771689669, "uuid": "89ae9fde-0f3e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.93.17:56191/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771689856, "uuid": "f90d1c84-0f3e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.164.252:60304/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771689856, "uuid": "f9121dca-0f3e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.83.119:53303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771691171, "uuid": "08fdce3a-0f42-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.164.252:60304/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771691235, "uuid": "2f234e41-0f42-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.93.17:56191/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771691827, "uuid": "900724f3-0f43-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8285062997/xv3EWMD.msi", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771693155, "uuid": "a7541b50-0f46-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.21.155:42657/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771694112, "uuid": "e18c9dbe-0f48-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.185.91.221:51578/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771694239, "uuid": "2d8a328b-0f49-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.83.7:38107/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771694359, "uuid": "750ac615-0f49-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.94.91:41972/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771694596, "uuid": "027fa3b1-0f4a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.58.65:54425/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771695488, "uuid": "15a85584-0f4c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.88.214:40230/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771695488, "uuid": "15f11b14-0f4c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.185.91.221:51578/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771695632, "uuid": "6b970a0c-0f4c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.227.23:43566/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771695737, "uuid": "aa567cb1-0f4c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.94.91:41972/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771695851, "uuid": "ee17a3af-0f4c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.12.89:34883/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771696339, "uuid": "1110af7a-0f4e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.49.65.2:58979/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771696877, "uuid": "521bb2a4-0f4f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.88.214:40230/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771697171, "uuid": "0126562f-0f50-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.197.5:49612/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771697233, "uuid": "25eaec1d-0f50-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.58.65:54425/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771697360, "uuid": "71dba9f7-0f50-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.227.23:43566/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771697654, "uuid": "21124282-0f51-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.70.161:40029/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771697778, "uuid": "6aaf9694-0f51-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.12.197:35835/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771697778, "uuid": "6af7ee32-0f51-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.209.87:36272/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771698012, "uuid": "f65a82a6-0f51-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.12.89:34883/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771698426, "uuid": "ed4b0138-0f52-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7774414118/kiHxlYB.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771698668, "uuid": "7d922ab9-0f53-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.197.5:49612/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771699456, "uuid": "52ca2392-0f55-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.12.197:35835/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771699817, "uuid": "2a0aca73-0f56-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.209.87:36272/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771700055, "uuid": "b7d09327-0f56-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.254.29:36920/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771700543, "uuid": "db0be4e1-0f57-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.254.29:36920/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771700709, "uuid": "3dc61ab4-0f58-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.196.107:44635/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771701139, "uuid": "3e3a5fec-0f59-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.253.226:41369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771701148, "uuid": "438c30a4-0f59-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.71.20:38413/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771701261, "uuid": "86ea52d1-0f59-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.84.164:44860/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771701853, "uuid": "e7af5f37-0f5a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.71.20:38413/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771702342, "uuid": "0b2d83d0-0f5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.48:47745/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771702644, "uuid": "bf40e86e-0f5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.220:57433/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771702821, "uuid": "28c96b06-0f5d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.10.132:41586/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771703661, "uuid": "1d31c3e0-0f5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.48:47745/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771703717, "uuid": "3ef0792a-0f5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.101.216:33713/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771704565, "uuid": "384481d0-0f61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.243.32:52167/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771705210, "uuid": "b870b07e-0f62-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.136.98:35544/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771706919, "uuid": "b32e1127-0f66-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.226.182.42:49705/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771706958, "uuid": "ca8a8965-0f66-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.23.121:59392/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771707012, "uuid": "ea8b2e20-0f66-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.101.216:33713/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771708398, "uuid": "24c25278-0f6a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.136.98:35544/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771708634, "uuid": "b19dde8b-0f6a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.79.77:43131/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771708696, "uuid": "d6a1e56d-0f6a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.241.83:37170/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771709595, "uuid": "ee74135b-0f6c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.56.150.238:56861/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771709713, "uuid": "34890163-0f6d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/huhu/titanjr.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771709713, "uuid": "3489040c-0f6d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/huhu/titanjr.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771709713, "uuid": "34891a66-0f6d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/huhu/titanjr.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771709713, "uuid": "34892f5f-0f6d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/huhu/titanjr.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771709713, "uuid": "34893ea2-0f6d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/huhu/titanjr.mipsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771709767, "uuid": "5507188f-0f6d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/huhu/titanjr.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771709767, "uuid": "5507336f-0f6d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/huhu/titanjr.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771709769, "uuid": "5638344a-0f6d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/huhu/titanjr.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771709826, "uuid": "784702b0-0f6d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/huhu/titanjr.ppc440", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771709827, "uuid": "78978b54-0f6d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/huhu/titanjr.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771709893, "uuid": "a02660f7-0f6d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/huhu/titanjr.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771709948, "uuid": "c0bff026-0f6d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.79.77:43131/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771710016, "uuid": "e9708d2e-0f6d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.241.83:37170/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771710066, "uuid": "0721a210-0f6e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.116:54957/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771710368, "uuid": "bb2e7d6a-0f6e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.85.182:53470/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771710847, "uuid": "d89c25df-0f6f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.192.3:42931/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771710869, "uuid": "e57493b6-0f6f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.185:44456/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771711213, "uuid": "b2996f00-0f70-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.192.3:42931/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771711225, "uuid": "b99d8227-0f70-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.226:35364/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771711335, "uuid": "fba12e9c-0f70-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.185:44456/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771711514, "uuid": "66733b8e-0f71-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.153.1:43171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771711596, "uuid": "974c2e31-0f71-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.237.177.17:33570/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771711690, "uuid": "cf0b6472-0f71-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.116:54957/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771711936, "uuid": "61935a0d-0f72-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.142.155:47992/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771712057, "uuid": "aa0512d7-0f72-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.192.99:54082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771712291, "uuid": "353a7d7e-0f73-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.5.55:49082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771712352, "uuid": "59715119-0f73-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://m67fvuhb.darkpine.digital/?=check&&actmn=qJMOBKMGGWKwyDER", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771712361, "uuid": "5f2499d4-0f73-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.120.17:42179/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771712778, "uuid": "574e4bd4-0f74-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.120.17:42179/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771712841, "uuid": "7cdd871f-0f74-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.226:35364/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771712954, "uuid": "c07942e6-0f74-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.153.1:43171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771713556, "uuid": "276390da-0f76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.5.55:49082/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771713557, "uuid": "27edebc4-0f76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.69.28.127:33659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771713558, "uuid": "2874b180-0f76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.129.145.75:41170/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771713678, "uuid": "6fdf1091-0f76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.142.155:47992/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771713737, "uuid": "931c7b86-0f76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.192.99:54082/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771714237, "uuid": "bd79bf21-0f77-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.80.126:35312/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771715240, "uuid": "130194e7-0f7a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.124:47304/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771715298, "uuid": "35c26401-0f7a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.80.126:35312/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771715530, "uuid": "bfb01201-0f7a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://qa6l1lsk.moonpath.digital/?=check&&actmn=jQBpmJrReJgrDbUk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771715663, "uuid": "0f143d8d-0f7b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.100.95:38253/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771716018, "uuid": "e308620e-0f7b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.66.228:55630/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771716077, "uuid": "060e7beb-0f7c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.66.228:55630/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771716251, "uuid": "6d6f1f4f-0f7c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.124:47304/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771717031, "uuid": "3e9a0f0d-0f7e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.34:49065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771717088, "uuid": "60bbca89-0f7e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.231.17:34211/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771717334, "uuid": "f327f50e-0f7e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.231.96:50670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771717692, "uuid": "c84ac31b-0f7f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.231.17:34211/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771718046, "uuid": "9b592bdf-0f80-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7774414118/wB7Ye8h.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771718233, "uuid": "0ac64364-0f81-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.26.79:49731/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682764, "uuid": "75eb2dc9-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.125.219.204", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771638724, "uuid": "ec36af7f-0ec7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "108.168.0.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771687684, "uuid": "ea824111-0f39-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.252.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771658825, "uuid": "b91e488b-0ef6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.15.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771715224, "uuid": "098a7c4f-0f7a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.27.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771659364, "uuid": "fa627abd-0ef7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.30.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771633025, "uuid": "a6d40ba1-0eba-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.43.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771666085, "uuid": "a0325828-0f07-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.65.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771706884, "uuid": "9e6c61c4-0f66-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.226.182.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771711563, "uuid": "836dffbb-0f71-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.237.177.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771662666, "uuid": "aa485b9c-0eff-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.122.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771714205, "uuid": "aa19cd17-0f77-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.80.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682285, "uuid": "5831c316-0f2d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.176.132.141", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771644784, "uuid": "083eec9e-0ed6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.57.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771704544, "uuid": "2bbfcb8f-0f61-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.243.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682345, "uuid": "7bd356ef-0f2d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.190.53.184", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771708684, "uuid": "cf2c7019-0f6a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.241.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771661106, "uuid": "08b6fe29-0efc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.6.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771634644, "uuid": "6c13aa66-0ebe-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.219.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771661884, "uuid": "d88cdfd2-0efd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.94.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771639625, "uuid": "0507cd76-0eca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.26.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682224, "uuid": "34366890-0f2d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.173.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771641784, "uuid": "0bb4f2c8-0ecf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.184.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682045, "uuid": "c91e9f79-0f2c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.158.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771676165, "uuid": "188148b8-0f1f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.51.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771687984, "uuid": "9d73266c-0f3a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.2.87.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771648745, "uuid": "40d905ae-0edf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.121.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771638124, "uuid": "865e3ee8-0ec6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.21.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771659906, "uuid": "3d39b279-0ef9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.153.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655524, "uuid": "097b2097-0eef-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.98.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771650244, "uuid": "be505a0e-0ee2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.247.214.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771638844, "uuid": "33bd63c9-0ec8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.27.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771652164, "uuid": "36be7569-0ee7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.163.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654505, "uuid": "aa63934b-0eec-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.155.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771659844, "uuid": "18a9dee4-0ef9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.35.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771686665, "uuid": "8afc811b-0f37-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.119.251.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771658044, "uuid": "e7943a75-0ef4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.243.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682285, "uuid": "58315503-0f2d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.157.56.105", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771711505, "uuid": "60b2efe0-0f71-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.153.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771643764, "uuid": "a7ec5c7d-0ed3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.238.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771659725, "uuid": "d19aabd7-0ef8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.195.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771694105, "uuid": "dd930fa4-0f48-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.185.91.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682285, "uuid": "5831a337-0f2d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.31.81.229", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771678806, "uuid": "3ee03043-0f25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.193.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771710844, "uuid": "d6da4067-0f6f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.192.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771712043, "uuid": "a19f3f72-0f72-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.192.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771675924, "uuid": "88e7865b-0f1e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.55.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771651745, "uuid": "3d092506-0ee6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.207.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682285, "uuid": "58318085-0f2d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.236.182.73", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771662065, "uuid": "4467ee53-0efe-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.106.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771651564, "uuid": "d161bb56-0ee5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.84.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771644606, "uuid": "9dac6289-0ed5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.100.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682285, "uuid": "58317a3b-0f2d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.50.218.234", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771668305, "uuid": "cbd36899-0f0c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.14.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771683964, "uuid": "415956e1-0f31-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.253.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771681564, "uuid": "aad4b04e-0f2b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.115.72.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771670345, "uuid": "8b483a64-0f11-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.10.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771672864, "uuid": "68ce1c24-0f17-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.45.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771674006, "uuid": "11794162-0f1a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.164.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771680844, "uuid": "fd91c1b7-0f29-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.208.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771700705, "uuid": "3b8004ea-0f58-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.196.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771677306, "uuid": "c0a6ba9e-0f21-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.11.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771633025, "uuid": "a6d40e26-0eba-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.121.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771639265, "uuid": "2e47e127-0ec9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.51.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771713544, "uuid": "205648ed-0f76-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.129.145.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771684205, "uuid": "d100d817-0f31-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.242.3.231", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654205, "uuid": "f7823c63-0eeb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "194.33.61.20", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771679944, "uuid": "e509934e-0f27-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "1m82015w.embercore.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682825, "uuid": "9a4b2a3f-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "206.123.145.26", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771655285, "uuid": "7acd0307-0eee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "209.97.163.167", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771650125, "uuid": "77360c4b-0ee2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.252.100.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771697764, "uuid": "62bfaa20-0f51-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.209.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771680124, "uuid": "5061fe9d-0f28-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.70.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771694584, "uuid": "fb270c66-0f49-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.58.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771708624, "uuid": "abd37c81-0f6a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.79.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771638906, "uuid": "5838b762-0ec8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.134.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771664105, "uuid": "03ebd214-0f03-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.157.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771675745, "uuid": "1df5cb2d-0f1e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.107.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771695844, "uuid": "e9ed60f8-0f4c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.12.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771643706, "uuid": "854f7ef7-0ed3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.151.74.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771676528, "uuid": "f0a1e1c1-0f1f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "26s1p5ue.frostholm.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771710364, "uuid": "b8e7ec5b-0f6e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.85.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771666505, "uuid": "9ae4f98e-0f08-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.216.223.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771689845, "uuid": "f22aa0d8-0f3e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.83.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771648264, "uuid": "22848f57-0ede-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.55.161.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771670164, "uuid": "1f83dac6-0f11-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.71.177.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771697764, "uuid": "62bfc7b7-0f51-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.12.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771636744, "uuid": "50096f26-0ec3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.81.219.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771695605, "uuid": "5be6ff67-0f4c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.227.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771660085, "uuid": "a8076f54-0ef9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.179.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771700044, "uuid": "b13def22-0f56-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.254.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771718224, "uuid": "05e268da-0f81-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.26.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771716005, "uuid": "db2b3aeb-0f7b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.66.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771639024, "uuid": "9ef96856-0ec8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.240.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771711924, "uuid": "5a62bac7-0f72-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.142.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771675684, "uuid": "fa1504d9-0f1d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.180.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771694344, "uuid": "6c0a1018-0f49-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.94.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771689845, "uuid": "f22ab450-0f3e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.164.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771649524, "uuid": "117fc786-0ee1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.84.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771705205, "uuid": "b5f198f4-0f62-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.136.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771661044, "uuid": "e3f86566-0efb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.245.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771650244, "uuid": "be5057e6-0ee2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.4.124.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771657684, "uuid": "111a9795-0ef4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.91.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771662065, "uuid": "4467ffb7-0efe-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.87.140.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771646644, "uuid": "5c80da71-0eda-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.35.112.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771715644, "uuid": "03d688d0-0f7b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.177.100.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771635724, "uuid": "efcdd696-0ec0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.177.99.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771648084, "uuid": "b6f4d6f7-0edd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.137.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771643464, "uuid": "f50fa235-0ed2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.100.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771717084, "uuid": "5e3d7462-0f7e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.231.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771637344, "uuid": "b5a0fbac-0ec4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.75.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771641964, "uuid": "77075c70-0ecf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.7.175.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654205, "uuid": "f78055b2-0eeb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "64.89.161.144", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682285, "uuid": "58314328-0f2d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.132.114.25", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682285, "uuid": "583161e2-0f2d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.224.162.132", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682285, "uuid": "5831b5c0-0f2d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "86.150.68.134", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654205, "uuid": "f7802491-0eeb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.235.116.139", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682285, "uuid": "5831d6bd-0f2d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.40.112.34", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771682885, "uuid": "be24aa22-0f2e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "arilprivate.storexyz.web.id" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654206, "uuid": "f7b6a96b-0eeb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "bot.dead.my.id" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654206, "uuid": "f7bf45a9-0eeb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "getryos.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654206, "uuid": "f7a53772-0eeb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "helpradardps.space" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654205, "uuid": "f7958240-0eeb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lunq.revio.live" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654205, "uuid": "f7980d89-0eeb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lunt.revio.live" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771712349, "uuid": "5828c3e6-0f73-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "m67fvuhb.darkpine.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771715525, "uuid": "bce604d0-0f7a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "qa6l1lsk.moonpath.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771687565, "uuid": "a38b6faf-0f39-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "qfm9nqbc.windford.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654208, "uuid": "f8ec2505-0eeb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "radardpshelp.site" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771688405, "uuid": "97e67ebd-0f3b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "staying-heavily-meaning-blowing.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771659725, "uuid": "d1b70b3d-0ef8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "stqol819.thornwick.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771654385, "uuid": "62a2824b-0eec-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "teamrising.ae" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771666265, "uuid": "0b814e48-0f08-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "yzac4fqt.duskvale.digital" } ] } }