{ "Event": { "published": true, "date": "2026-02-03", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-02-03", "timestamp": 1770164121, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "0becc0e1-63ec-4a93-93fe-2160a9d51383", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "098f9939-0093-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770076854, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770076854, "uuid": "5bec583f-3148-47b9-9c92-c569c2218421", "comment": "Malware payload (Mirai)", "value": "c73fbdb740d3281570a57b24d5eac732", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770076854, "uuid": "f191cb8e-8c43-46c1-a0cd-416d9cad7690", "comment": "Malware payload (Mirai)", "value": "29ce764b4783c65d187734a0370a6f07a89a40bc60106b0283d797b99391f317", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770076854, "uuid": "cf95c9c8-fddb-4bd8-bb78-5b090b03aa97", "value": "T15EE47C633B21DFA4D354C27105F3C7655AD420A21AE2909AB27CC7187E6162E3D6FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770076854, "uuid": "437298ee-5344-421a-876b-a64a0b360cc0", "value": "12288:Z/z97J4tCcR6l5XDCQcqt7+wYUEUyd3se6wZ4+vc8p1vMlQli:Z7L4tCcolR2Qz7+JHdce6oVEF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770076854, "uuid": "318bd06b-af25-4d80-8c5d-b5538861824b", "value": 704620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770076854, "uuid": "0a692347-ed62-46bd-aea4-eeda361f35e8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b3e9cf6-0093-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770076858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770076858, "uuid": "900a522a-ccde-4043-8a0a-cb5959ee2f2b", "comment": "Malware payload", "value": "f86cd334b472efa31ca2e8f4d4312bf0", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770076858, "uuid": "12257799-b424-4570-8cbf-0d3a44498293", "comment": "Malware payload", "value": "3e52a916bba64107d275ecb6f8004aa0d87f4533570943e7c687be75688ba824", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770076858, "uuid": "a997a459-30e3-4019-8551-e50fa0b1eb67", "value": "T1F525F9F141A681D0D6111A4069643FF0117EB827FDDF28B513672B8DDB9F894288EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770076858, "uuid": "0a4b819f-4781-4855-9e63-8824919b2136", "value": "12288:ynzD9CcG+f2GnF46Hui/Sc9SOj7nPbkf7lAbLOzJ4M9XAevw+nC1pvoF46Huu/S7:yzD9CcG+f2Gwknf1ElVZlWBN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770076858, "uuid": "702b188e-779e-4fe2-847d-9203a2d2feab", "value": 1014784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770076858, "uuid": "17b30944-e92d-4216-8e6b-e441754b63b4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cbfcfed-0093-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770076941, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770076941, "uuid": "bbeb4893-4558-4a60-ad80-9cfb0941e7e0", "comment": "Malware payload (Mirai)", "value": "9c0e5184eecdabd0fe6a5c76e1a059e3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770076941, "uuid": "5cc4aeed-8f92-441b-be5f-6f5ba7906d8d", "comment": "Malware payload (Mirai)", "value": "b3151f3fbb3192990b4092a80bf09861c740d677d342c8982fbb52f8e12733f6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770076941, "uuid": "da5a5672-4217-4d0b-86ef-388c68e71996", "value": "T162E43906EF405FEBC46FCD30893EC35705DDA9C75281B67971BC8A9CBA5D26A0AD34", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770076941, "uuid": "66f589fb-4e86-4491-9b40-2ed0972e0411", "value": "12288:SukbJq3Oj/aUuELuK4RXwMrOAsO3W/KkFAsdNyHpOfAuhH3UaJSjB/clym48ejnO:3vgjrdlqLrxTyIx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770076941, "uuid": "1e4103ee-9933-4f64-b026-18261bf371e3", "value": 704620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770076941, "uuid": "86750fef-d5ea-4be4-9145-e36a12c1853c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1cb0cbbb-0060-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770076998, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770076998, "uuid": "f99757ed-b036-4fac-974b-8277d7d1e7e8", "comment": "Malware payload", "value": "03642bd8d5d29f20cc46a1070cbf361d", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770076998, "uuid": "7e455718-c1fa-43e4-9e11-1c5d655cfd19", "comment": "Malware payload", "value": "ddd865c21deb075ea6aa498d772c32d684f82c9a7b5ce3cbf17819ccee01683c", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770076998, "uuid": "d4611a9b-8ab1-428d-b469-0c2dfe82b7a8", "value": "T1DE310A9C5AA73684E72057F743D97418DE924F5DCC30831E860BD213EB455D84AC8E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770076998, "uuid": "7d5e1b72-4df3-48ad-b74c-056043765065", "value": "24:9HWQ9zTCMmviMbVNJPea22Cdo22z2Fivlw58bRnC59pqxVaShx+66YH+GGxNT6YQ:92mCXXFPOroD20vlP9ni7QZ6YZGxNY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770076998, "uuid": "3adeca0b-fbfc-471c-88a8-ce58d6b10a6e", "value": 1586, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770076998, "uuid": "0f1b86d6-06a7-426d-87f4-aac1df719187", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6bf522ba-ffab-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1770077119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770077119, "uuid": "291de6d7-2146-451d-ad34-7815635c2d2b", "comment": "Malware payload (Kaiji)", "value": "4ccfb94f84ce77bca5a6b8f23266a7b6", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770077119, "uuid": "c31440d3-318f-42ab-9d3d-aa853e08e850", "comment": "Malware payload (Kaiji)", "value": "fba4302d3ccd5d38332234a75e3ef21e56fd8bb03f8303f5891a5ff2de5d6fc1", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770077119, "uuid": "425aad67-4570-44f4-abc5-67f98fcf4a8b", "value": "T175365C80BB0CD139EA5B0A724C738F2063617E46C1E4866B771AF76F05B16E65A0FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770077119, "uuid": "52d76709-7f5a-4a53-8dab-3a126458b9ea", "value": "49152:UbfIMWeDTyKn8Nrwtt56e3JLxKYzYR2iLHwOng/KosjiwoNy5bfkf325NV:MgMWeDTyK86t53txKSi21S7/kf327", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770077119, "uuid": "60ce1081-db47-4925-9d4c-ce668dfc1fb6", "value": 5111808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770077119, "uuid": "bceeaa51-e74f-4937-b51b-8290630eada5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "291b3415-0094-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770077177, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770077177, "uuid": "45211ccb-6bc2-4db5-a674-6425c8b0daee", "comment": "Malware payload", "value": "541148c29f62f918bf6e53bc6fd902c9", "object_relation": "md5", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770077177, "uuid": "395afefb-914d-4d6e-ad21-b35968b31708", "comment": "Malware payload", "value": "7289a18cd97424a16f3ff464cbceb325a79770d9f0748321545801423936df5e", "object_relation": "sha256", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770077177, "uuid": "3b691839-4d6e-4f63-8c34-da00068dda10", "value": "T14136137E855910BABF7F4025BC05AC1FD8798B0A2007215E52DBEEDE23C5349937AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770077177, "uuid": "933b63e1-5763-4ff0-8502-340f9865816e", "value": "768:NuE7bMsLeDCeSsceeUsg7wfEcaf6ImmgLE:d4f63Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770077177, "uuid": "036e9e51-ee01-4659-817d-0c63c62c2ed9", "value": 5080762, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770077177, "uuid": "4567b3c2-f6dd-403f-8f6f-e4206b329d29", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18742081-0091-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770077207, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770077207, "uuid": "6c5ea33f-ee4f-4af8-9c6e-3742ec18d903", "comment": "Malware payload (Mirai)", "value": "56561bbeec91e1da43b4373b910c1f02", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770077207, "uuid": "717290bb-b519-453f-b0f1-8962e49142b5", "comment": "Malware payload (Mirai)", "value": "6e5ee31942e4c3b7718ca1afcdb2531fa7d517ce12af49404a05f0792ad0dd51", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770077207, "uuid": "ba06b292-4879-4cbc-a11e-1fad7c607440", "value": "T11EF46B42FF1C4922C9531DF0197F43D9F7147A5340F4922A270FAB572622E3AAAD77", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770077207, "uuid": "5b3a12b9-c939-4373-a0cd-08c7fb8bb553", "value": "12288:bGP6UYRjDjUOYUIe5SA/DuKCxgaZdWlqISyYT/Nt/wepXUagmCgPs:bGStDjUOYUIevujO8W92zE73z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770077207, "uuid": "1b76e402-511d-4f34-b391-2f92cca24a84", "value": 792544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770077207, "uuid": "6d8c6633-d39f-46d4-ba57-74772aea8cc8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1770077301, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770077301, "uuid": "ee723348-b3f5-4831-9a9e-f8176ae52fbd", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770077301, "uuid": "91c1b6b5-2d5b-4581-92cc-e74a19fd6a17", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770077301, "uuid": "864a6836-c66d-414f-ac28-d634245a9d0d", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770077301, "uuid": "bd161f29-255e-4743-9429-6b2f28c52afd", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770077301, "uuid": "c681ee64-6e1b-427e-aeb2-fa428088f310", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3569ae18-0095-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770077627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770077627, "uuid": "cb166442-6933-416a-9d9a-63e3f0dca3ff", "comment": "Malware payload", "value": "bc349ff9962ffd150e4e8e442db20efd", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770077627, "uuid": "884f454e-448d-45b9-9b02-1c6167abc74b", "comment": "Malware payload", "value": "015147dd909188f55d15bc356b70188e774c97aad3cf65f7f5b5f2b21a73c859", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770077627, "uuid": "7b78f437-d1fb-4ab2-9ce9-6ef7787b1636", "value": "T10AC0802A519FF4150C0245C595407C0F411F05510DADA7C48576C1694584592D3B17", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770077627, "uuid": "308df677-6996-4768-97db-86b30cd6c1cf", "value": "3:N8dHElMKKhmHEVZBgyGLERk9FKTFlKGvMIQRV38RqLYfSrAcIh0cVQQA:2FElLZHyiycVyTX43H/8ltA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770077627, "uuid": "c8a64dff-9281-4662-a498-a9d7a131c951", "value": 163, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770077627, "uuid": "85d96286-71fd-4983-a6e6-fd04c125efa1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6d135c6-0090-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770077629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770077629, "uuid": "2ef6e448-9541-4ab9-b70a-53b115fc5541", "comment": "Malware payload (Mirai)", "value": "390f40a265aea3f58cb42e7d0fadc773", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770077629, "uuid": "55be95a2-ca1d-43c5-93f0-6d4220c04b21", "comment": "Malware payload (Mirai)", "value": "def6d6eaa0dca109f4b90cf354245385f596c4cb6883bb9f614872366201349c", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770077629, "uuid": "468e13ed-b4cc-4ae0-bc04-006e5e90ce34", "value": "T196C43845F8809F61C6D529B6F75D82A873174779D3EB72069A184B303BEB86F0F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770077629, "uuid": "8994fcd7-af43-424a-b406-df9d2af40a61", "value": "12288:8MDOKeM9yUXAOTfAyiIv+BOwJezXcPR32CmQyNgC8prPxA8V:8MDoUXAhrq+IgezMPREWn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770077629, "uuid": "2c6fce84-b659-4b2f-90b8-5cc8954a7cbc", "value": 563532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770077629, "uuid": "459a644b-8b09-4026-9a11-93ccdb8f0420", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0c31b42-0062-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770077964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770077964, "uuid": "807a01ac-144c-489a-a39a-81611ebf60c8", "comment": "Malware payload", "value": "cdfd5146e237e8fd8eab4940498c6066", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770077964, "uuid": "979c0da6-12c5-487f-b960-2b19b575ed65", "comment": "Malware payload", "value": "05db5f0775e2b7f0769551f172994b5aa7b6095d5001013e1dfee75972c2b4a3", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770077964, "uuid": "12aece67-a68c-43ee-ad1c-e44794666f0f", "value": "T1E431DA420B22E065D7C44AB7737650FF864690046A6C71D6672A2F973E3372D5EF23", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770077964, "uuid": "557b0ffa-d106-421c-90df-f5cca8e465f5", "value": "48:9SNv4rk2/4FJfM6Sc82v1jNDU3DL2Yi9wZLH1LQcs6Z9S:MOgFBbSc82v1jpxwRFR9S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770077964, "uuid": "f75cb528-06a1-4c57-bdf0-5abde658b6fa", "value": 1578, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770077964, "uuid": "94d4da34-3bef-41cb-895c-361635a5b49a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "011eee52-fe69-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770078359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770078359, "uuid": "d06130a9-6246-4df4-a5e0-0152b4fc0e3e", "comment": "Malware payload", "value": "1ad0380112768af41169e027ad2c1e8f", "object_relation": "md5", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770078359, "uuid": "2e1ceacf-c9d9-43e8-a48d-ba1eaa695034", "comment": "Malware payload", "value": "b75258b905334fef87ed8c67f945dd1f73440a050f90efbc7c11fb599bb8fdbf", "object_relation": "sha256", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770078359, "uuid": "0ddb3b9e-956d-4003-b566-b1f4ff4f51bd", "value": "T1A7310A4206112711CC03E2B690D5C6A491E1834B9324F2A31C7EAD53EFEC1F8EA673", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770078359, "uuid": "de8be06a-664c-4bac-9458-61451bfced22", "value": "48:9IDjOlGsR2uGlEXDlp3U/APkyXKJuj1mr:CulwH+Dl+VyXKwwr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770078359, "uuid": "111e1698-dcd8-4d37-b1c8-c0cc3a117988", "value": 1586, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770078359, "uuid": "f208fcbe-2c84-4f25-9e29-027bf8848c73", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad007868-004c-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770078532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770078532, "uuid": "f56e0e56-9250-4efa-9ee6-39bec8debee7", "comment": "Malware payload", "value": "116c8976043dbc3bec94eb2725c8215b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770078532, "uuid": "c199ac84-853f-438f-86d2-f2babb98b626", "comment": "Malware payload", "value": "dfb2efd53794478f7aaeaea3b23bd0667e10629727388828b6791284690c14cd", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770078532, "uuid": "fd9f6d23-edbc-42e5-b6ae-c8dd4346a10e", "value": "T1BF310A69F3AB08E9EE565C337C8072108911ABF50295A783AB508D1837C77509A4DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770078532, "uuid": "615ec993-fd31-49a4-bb25-1a59879d34ff", "value": "24:9ENemgDaFzPHuoQu75vlwZEhSHKEgMADJK35ba0VZ60fMyW9zz/fe5zGXHmHV:9EPgq2oQQL0EhSXgMAlK3taJOY1L3m1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770078532, "uuid": "3df59373-89ca-45ce-b69a-487f573b8ccc", "value": 1595, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770078532, "uuid": "795516dc-a631-42ee-9e42-86bc40823ed8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4f3b637-0097-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770078807, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770078807, "uuid": "6f2bc698-a07f-446f-9a34-20beb5b8fd04", "comment": "Malware payload", "value": "afe73d1b69e835974a55907f35812ec7", "object_relation": "md5", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770078807, "uuid": "b64f1ed3-67de-4b50-b833-f591f8657269", "comment": "Malware payload", "value": "0e211ffa61e9d27d69f57062122c9cce2cedd497fbaaccfeb13ec8d8c02d2038", "object_relation": "sha256", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770078807, "uuid": "ed39f1dd-5978-41d5-9957-06a36298f7b7", "value": "T10D31E7674647A2C7EF7E57FF8686420BA236D1E2C1A0D05A8D00BD10D5E99112F4F3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770078807, "uuid": "8444cd93-a21b-4ffc-8ed8-d5a8f8630f1b", "value": "48:9hr+0UOdEs1SDCghJVGeO77S9qrKp0L0/KJnxl/5y:HyPOus4DCgJVcHaqrK+LoKJ30", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770078807, "uuid": "23d5d415-149e-4690-ade9-7d29574e8aa6", "value": 1602, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770078807, "uuid": "a491ae71-4fd9-4f39-9d19-ab35ed71981d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "686c900c-0053-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770080611, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770080611, "uuid": "f409f800-41d9-45c5-ac9a-35819e4f1385", "comment": "Malware payload", "value": "9fc7542d29cda3f412b9f6ea26d7cc39", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770080611, "uuid": "cbbd1a3a-774a-49cf-a855-53306918f4e5", "comment": "Malware payload", "value": "95d6454a96b4240f6eba499eb3eb6714807386e18d4ad8e471f0e241f541074e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770080611, "uuid": "43158ce0-70f9-4f66-9b05-ebf345bca132", "value": "T110310A421A2B9320F7235571368FCC454A4D294C289FC0D7CA1FABBBEFEA4754B1A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770080611, "uuid": "0301a174-8db4-444e-a1cb-6639cac137ce", "value": "24:99VClqImYNkd9gpKRZS1jklvNfs4Kv5QPaEZOIRt+9wuHZqKQQ+Jzh:9Cl5WOMDgkI4Y5QPaEZOIRt2w+Z7QQ+T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770080611, "uuid": "bb2fd2bb-6f4f-41cb-a5c2-d9e4ee79fe5f", "value": 1589, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770080611, "uuid": "681bae4c-51a7-48a9-b82b-62729fad35ee", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a24d2900-009c-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770080816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770080816, "uuid": "8a40b85d-db2c-42e3-8a62-307e68634c26", "comment": "Malware payload", "value": "1b580fff8f5a9931b8efc61eb025c057", "object_relation": "md5", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770080816, "uuid": "952dd996-5038-496b-90f3-9f671dc1c0b9", "comment": "Malware payload", "value": "4a8dab65abcfd71f3a62a956a8d8bde06a7a9aaa694ebffe42958675ff3b14f9", "object_relation": "sha256", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770080816, "uuid": "e7dec717-827b-4b40-b482-541a81e0fe20", "value": "T1F25623D351D85FC0831850C77497B51DBD0ADD2A052388ACF64EBECEFB1E66B26326", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770080816, "uuid": "c396c4f6-b2dd-4c73-a4e9-2539eb6860c9", "value": "1536:BuUnzdJ/dddT4ctwfoN0b8xn0qtmSg+jKsZgKHSjGD5lP/8V5j:e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770080816, "uuid": "5f627c17-56a5-4d75-a318-08f36921628a", "value": 5903196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770080816, "uuid": "0d0093dd-e466-4aad-8a77-57ce252a56c7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26c8ed86-009d-11f1-8b2a-82aee05be84a", "comment": "Malware payload (GoProxy)", "timestamp": 1770081038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770081038, "uuid": "8cd8ba0d-bb8d-4af5-be62-a08585a582b8", "comment": "Malware payload (GoProxy)", "value": "3816e4ea1d36a12a93dc383b4a9929af", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#48c16b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770081038, "uuid": "dcc928a0-696c-46d7-a014-afe47e2ce848", "comment": "Malware payload (GoProxy)", "value": "2394203dbadfdbf0016e49604c0fe7295f2d355c5a2d301836f50a0c222ea2e7", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#48c16b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770081038, "uuid": "3385bb7a-6812-4ef6-98ca-f0590024e030", "value": "T1B7C69CB2DC531664C67AA134000393A9F63E77D82367FAC71A8865654672BF43B3AF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770081038, "uuid": "8b3c5236-125f-41ce-a894-b3dac6487b47", "value": "4035d2883e01d64f3e7a9dccb1d63af5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770081038, "uuid": "59e32132-6b52-49ee-8461-77b59dd82036", "value": "98304:yY3uYdjzt8pmt7wyfnnnbLmQzoyCPy/ep:yAfd3ipXyfnnnbLm4/ep", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770081038, "uuid": "409c3018-d7c1-423d-883a-9c4393dde560", "value": 12460160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770081038, "uuid": "21cc264b-cf31-4a85-8d35-7b21ac407564", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d057581e-009d-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770081323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770081323, "uuid": "f6aabfdb-8fb8-4dff-908d-7937b5e1de4e", "comment": "Malware payload", "value": "11637fbd61b0fffb6db9ca8a2bb4f76c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770081323, "uuid": "a40e640a-19fb-4621-8dcf-1883e9574e82", "comment": "Malware payload", "value": "9e0ddfacb36401877720ec3ca502a4f692bba13409c50d47439d284608eb489f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770081323, "uuid": "3db714c4-0760-4918-a306-bf0a485825c3", "value": "T162F31A62A7B4197A23BB43BCE455F78879688523D74D62E1F8FEC19C42C1BD224727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770081323, "uuid": "7bbde670-ea63-4557-a362-dd697c3d8ce3", "value": "3072:EdrK2iu5mGuE/kDkank7evQ+/s4oxY+b3wyAtA+3CWPCWTn5bXZEtUioCkdGas0X:aru8GPLMWLasflH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770081323, "uuid": "43120634-81d7-45e9-b15c-dab5aa94792a", "value": 159238, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770081323, "uuid": "ddaa33ab-1141-468d-b879-6aa086f058c5", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b652e99-009e-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770081636, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770081636, "uuid": "3263dc84-5485-4470-bb8c-375bc4394b09", "comment": "Malware payload", "value": "0e9f100161777a53130fa47beae53bc2", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770081636, "uuid": "e7e8db57-67c4-453b-a069-3a65cee54009", "comment": "Malware payload", "value": "f9f6bc139960a8985412a8243358516c94f4a0a5b0c3d81e7ab04925ccc8383e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770081636, "uuid": "448579c5-7d8c-4ee0-b56e-c63d43498227", "value": "T1DD312A1C410A1494D3FF1FB22863148C51A04B02C379403475EF3B683C405702AA8E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770081636, "uuid": "821f3ff4-6d87-4d86-abb3-9776f1e01cdd", "value": "24:923US2qHbC5F2O5TBSp4iUCsB4ZD0BfVgUaG5q7PwH1GFyTn52E/BBSv34Tb:92kSbc5TIHUh4RQVDKP6HTn0kBB+ITb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770081636, "uuid": "f499109d-6923-4899-ba0e-bb0c824675ef", "value": 1601, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770081636, "uuid": "0f0cfef1-8e83-4c98-85f9-97cd3bcfce9e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d94f6f81-009e-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770081767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770081767, "uuid": "9fd32216-1580-4485-80d1-0464251a6fe5", "comment": "Malware payload", "value": "95729a46ad201493c9f717d56925d695", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770081767, "uuid": "b5025bc7-6765-4833-b9e8-7a729e52449c", "comment": "Malware payload", "value": "f27fcf6c0186768380cb60cba7410148a51c84edbe94535f2c9fcb5af464b40b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770081767, "uuid": "c594d7cb-597e-429c-95e8-cdb9ad8432a6", "value": "T1AC061111DA91CDA906AC8169246A0DCB2A900E7B4C1877297F9F5E8E1F1F90FD4743", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770081767, "uuid": "6fd52d1e-5705-436e-bff9-8ad5141b0c14", "value": "49152:muwoz1Chg+xxWp/0wvoUkyl4pfJp7d/jqv/36AP:z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770081767, "uuid": "c554b967-49ed-4bdc-a2de-07e014558261", "value": 3730993, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770081767, "uuid": "378f1293-03c9-47e3-91d6-96097b760d48", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770083239, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770083239, "uuid": "2fbaed71-711f-4865-9bb2-918113b5cc6c", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770083239, "uuid": "73fcf43b-c648-4a30-bf3f-0d981f456e37", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770083239, "uuid": "f5feaf80-3efb-49a5-b455-365a5613212e", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770083239, "uuid": "7f20df11-7583-40e1-ac81-d6a3c15b7f27", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770083239, "uuid": "3ad12232-00a6-46a0-8c74-7f1eb20935d2", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a47e9f47-00a3-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1770083826, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770083826, "uuid": "c46beb66-c479-45db-840c-671d81389f32", "comment": "Malware payload (Smoke Loader)", "value": "c76f06cdea5ab7c57fea4df91da5f922", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770083826, "uuid": "495e9bf9-c1bb-48c0-9d30-41735fbaab96", "comment": "Malware payload (Smoke Loader)", "value": "549624f96e34e4062140376e9aace04eea379b519ebe1efbaff445c00950328b", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770083826, "uuid": "4151e707-7a56-4580-b94c-de75af7d67e9", "value": "T19726E1713E5C60E6FC4F76B29044B03A2BA4F97B468A3470B498B58E4C47A953F3F4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770083826, "uuid": "150fd9a4-a298-4e32-ba14-375f20b85a05", "value": "a73f8fb0372b492212e34f67d8f52dba", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770083826, "uuid": "de320f25-0b6d-474d-bbb7-f441f68e2dac", "value": "49152:XHW9gDWWYSUc/3ZGstobnSpEKtwD8BqYPU/1Y43qj8HBOIQiti9phks18rbVJ:XH0NW5BGoobx4YYPUJbHcL9phL18rbVJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770083826, "uuid": "701552b1-91e5-450f-9a91-3dbdac443ca0", "value": 4829664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770083826, "uuid": "6854bdaa-237c-43a2-9023-0d3476022f39", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3089aca-00a5-11f1-8b2a-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1770084790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770084790, "uuid": "5579bd8e-134a-477e-b430-f2932c76aed9", "comment": "Malware payload (ConnectWise)", "value": "f2b9abb57725d927aac362aad065a177", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770084790, "uuid": "9f81fa11-5be3-43d9-8199-948535897ddd", "comment": "Malware payload (ConnectWise)", "value": "513e1febe3eb273e63edd43ae830c5552f98fc46b5d960cc651bbce7fa07c932", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770084790, "uuid": "36a0ae1d-f779-49fd-8373-7824b77d9b42", "value": "T1DBD622136BF89E67E0B1DB74FF365464A7277E055922B1EE1214790E2F70A8089A33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770084790, "uuid": "8ad2d977-7fc3-4884-9fe4-c0e2469ef6a0", "value": "196608:4Hxcp9ym3nltDUJV5Hxcp9ym3dHxcp9ym3xHxcp9ym3wHxcp9ym3gHxcp9ym3CHt:GGplpaGpPGpjGpeGpOGpQGpC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770084790, "uuid": "65afa9d1-fa96-4d98-9229-5f1a5d63698b", "value": 13541376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770084790, "uuid": "ab121155-74c4-4ae9-9497-9fa5c9a468ef", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770085389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770085389, "uuid": "3aaf0374-656b-454e-8636-dfd2dde30841", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770085389, "uuid": "58735a8d-8930-40ef-89e6-d4e1b636f65c", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770085389, "uuid": "34422168-f117-4256-8ec7-64daf255eda0", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770085389, "uuid": "bfd66094-5b17-4fd4-a3c0-26f1bf431982", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770085389, "uuid": "6c474b82-324a-4d15-a5b8-d9d1e64871ac", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be6a521e-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770087735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770087735, "uuid": "da243eb6-e35f-46e0-a8dc-22c9fb3818f1", "comment": "Malware payload (Mirai)", "value": "870f44db03c7d8c691788784734b3a8c", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770087735, "uuid": "cf4deebd-d6fc-4f5d-92a9-9cea9a3e1b6a", "comment": "Malware payload (Mirai)", "value": "1e86a0de4de91d4747615e25d021ffde6cec82304e5b7a8c3ab6bae14873ae2c", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770087735, "uuid": "91e244ba-11ed-441f-b9fb-2118ebd59da3", "value": "T126262951FACB94F6D5031D3040ABE2AF5731AD098F25EB87EA007F2AE97B6911D361", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770087735, "uuid": "d09c9402-2a04-4725-b94d-85f0e4c92acb", "value": "49152:9FPnZcrHbtUxJfvZE9yt0irV/alfBcSHonizm9J9Z/0QhLODDUED+8ZBkn0VF1:9hnZAoJfW9yA6izK9ZW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770087735, "uuid": "5751b9a1-31fd-4df5-a8d6-e2e273d18565", "value": 4452352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770087735, "uuid": "a36dd74d-f213-4456-b16d-2e788e5fc061", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31b7c9fe-7fde-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770087792, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770087792, "uuid": "4892943a-f362-49cb-9d89-cc152a206006", "comment": "Malware payload", "value": "106a736477f5e6efc07bdea0249986f9", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770087792, "uuid": "d8c62424-1e8b-44a7-bee5-741ef8f7c3e0", "comment": "Malware payload", "value": "e629334def73be9e166ecdd9d5d73d6be97ef7f7d16f05383892332acb324b73", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770087792, "uuid": "c3ddf88b-effe-4afe-b31a-4a4eea6646e1", "value": "8A64D08AEE01AF21E9C125BAFE5F034973634B6CD3EBB011EA20872537CA55B4F76045", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770087792, "uuid": "12961aab-4951-47e1-8562-7f1ae3b9c548", "value": "6144:p3lOYoaja8xzx/0wsxzSigabE5wKSDP99zBa77oNsKqqfPqOJ:p1CG/jsxzXgabEDSDP99zBa/HKqoPqOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770087792, "uuid": "696e7149-614a-457d-9138-08e6894e17f1", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d2fab50-fed2-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770091599, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770091599, "uuid": "5553518f-6139-4b39-ade0-cb038bff248f", "comment": "Malware payload", "value": "c869dc749faefe08a5eed019ad3ee438", "object_relation": "md5", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770091599, "uuid": "dbe2aecc-8543-4822-82d8-ceb28ee83ae2", "comment": "Malware payload", "value": "018eb2b85fdb04a110c608eff76fbe4a126362c6661176e8ebca0dae65b48b1f", "object_relation": "sha256", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770091599, "uuid": "660e0cb9-173e-4424-9946-f55ce49a3911", "value": "T10D310A776A3CB6CBF388C97C3466CE409B55E86D1B188E98959546117DC042B1F00B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770091599, "uuid": "7ba384ac-5516-4d92-a4c1-818f33c1937b", "value": "24:9vyf2qHmyyE0QcnL4gcJZUMWb/VYtWlQuWBpSbw6oVdEDMiT6v6L9PBH2XE4DnTq:9v6R2378ZUME/W3JgKCL6XLTDsn1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770091599, "uuid": "f92c2e36-16f1-46ab-86a9-d0e9eebf264e", "value": 1585, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770091599, "uuid": "a05444e5-e9c3-44a3-a456-9586195107d6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c3055f7-074c-11ee-8817-82aee05be84a", "comment": "Malware payload", "timestamp": 1770096622, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770096622, "uuid": "79624c6f-26ac-4ec1-a400-98e5b0b4b180", "comment": "Malware payload", "value": "5dbb6f5c4c524a5d6ca602569bbca0a4", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770096622, "uuid": "bf352634-9ede-418f-ae02-70a58b38c430", "comment": "Malware payload", "value": "9f436ef653c76f6ba28138010083981e519d329121498ce18dae02d5d6eca0cc", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770096622, "uuid": "855e6aec-439c-4869-b1c2-13b4c60f808b", "value": "T11564F18BFB21AC2FC9000B7115DB0759B3BCDA5A82C7D181F394C95F39BA285B7A11", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770096622, "uuid": "d79ad1a3-b655-47ac-ae0a-14f2a91b9df0", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xiojPOdOQ33Q:p3lOYoaja8xzx/0wsxzSiGPqOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770096622, "uuid": "5b27a877-fa2b-4d94-88f0-2d988efad2de", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770096622, "uuid": "a1c67e89-7dec-47e4-b0ee-9b471f4b8795", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72d2c62a-00c3-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770097487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770097487, "uuid": "4c90f176-6432-48c9-93d6-30c1bee9b16d", "comment": "Malware payload (Mirai)", "value": "3a477467418ce057a23347059153f9a4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770097487, "uuid": "d8736621-173a-42ee-8a27-ffa2ca3d1784", "comment": "Malware payload (Mirai)", "value": "431776d13d6e8312c4e34a94be9401c2303e71bbf5694d84f2db2db1cc301f9a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770097487, "uuid": "f6939ace-b339-4c08-9c40-b3c68f8e5e5c", "value": "T1A05302B0944E5E14EDEBB6BCB9F9B9D60BE0925E30674770BBAD8362024F45173118", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770097487, "uuid": "5fbe0334-6feb-41aa-83e7-417fa3ce7b17", "value": "1536:pgMgcnUqBMwaU2PCC9BhpBFwdmbYRHAcTkRr4u+qgw01WXb:pgMgcnNBMbU2/9cH9U4u+qgwoWL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770097487, "uuid": "7cef37cd-a25c-49fd-9570-3287c516693a", "value": 63252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770097487, "uuid": "d329924a-a138-495b-b080-a5a2bee66ce9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "951dec90-00c3-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770097544, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770097544, "uuid": "13b2a98a-a977-42af-a11e-12d1352ada29", "comment": "Malware payload (Mirai)", "value": "0494a4ee6eb96001d95027e9a94da56f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770097544, "uuid": "179777b4-56e0-4268-ad81-0b40200505c9", "comment": "Malware payload (Mirai)", "value": "b4d2ed92cc922ed2c964185d8b46a7b65d06eb8a1ec03248128949dbe6937824", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770097544, "uuid": "e355fae4-5a01-4d5e-8ba5-a0a9ad66b14c", "value": "T1C891A3E57478577A2DA0ED73B7D6C582F18032AAE1C94C0AE2D6F0E4485CF61FC94A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770097544, "uuid": "5e31c040-7583-4989-a155-3cf45edf0d4e", "value": "48:vnuMV4k4nt1V4dnrsrWV4hnCoV4DnEWEEV4EOLn2kV4DJnt1V4BnpZV4hnASV4xP:vrWnW16/QENEpOLN2ryjaBqTkrS7x3D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770097544, "uuid": "80a8f948-5328-4cd3-912a-e10ab1e2f4c3", "value": 4414, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770097544, "uuid": "64ebf873-f05f-449b-8bc4-45840207957f", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52659505-00c4-11f1-8b2a-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1770097862, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770097862, "uuid": "7e703486-d7fc-4575-8ace-8277c184b5fc", "comment": "Malware payload (CoinMiner)", "value": "f8a3736239307b598503e9b1ac168b8f", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770097862, "uuid": "3fc7acfc-c094-4cb5-a2e9-02e4286253a2", "comment": "Malware payload (CoinMiner)", "value": "32021429efd71f380c95a761c97a974fa0e3e9f67f6ccf4f17baf6f0707ef36f", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770097862, "uuid": "c7b32b24-8c02-464f-872f-2f69a64dad09", "value": "T178F5338EBBD621A8C3DFC57489EEC738DE3A755203006EE70AC507AC562A4D85FB4E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770097862, "uuid": "08fe5ed8-fe74-4be3-b1c3-d718ae614d3e", "value": "3641b918fa6fcd6b6754b75fd2065c00", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770097862, "uuid": "d4dbe260-c15a-47aa-9af9-75fd4c0f0269", "value": "49152:psYdWwRkf/wlrAHDHGkOXiEpo6DYhsW1mOYxkUj958N0R4zJ2/l8DlIk:psY4wOXwGjnEXDCn16xkUj9+TINq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770097862, "uuid": "f2770333-7170-4ae8-9b32-98f3ba64014e", "value": 3443512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770097862, "uuid": "a7fe3a95-f6a6-4ef5-983e-5dd023b7609f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e1ee3d8-00c4-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770097989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770097989, "uuid": "ea4520d1-bd7c-48f4-b613-aa1d6e8056ac", "comment": "Malware payload (Mirai)", "value": "b5f2811a882c4592d4203c445e17be78", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770097989, "uuid": "133dfdf3-3161-415e-92a4-3d714c79713e", "comment": "Malware payload (Mirai)", "value": "3fac799fe182b7a5a55c3604f74232e56e3f74a4da11d6f02818d1dead7b5127", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770097989, "uuid": "3147c11b-d24b-4205-9ee5-5766dfbefb52", "value": "T1096312041737DAC2C5200871883A83E963B87AFAD94B15BD2726D3DC6BC1D2B676D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770097989, "uuid": "a2615fa7-31d8-4cf6-96f5-9e9efc475c45", "value": "1536:r9uNsyItfJ0cRy+9HnDps0+hVnBL2tlS7LhooY8ikqjtR:Ss+uy+DGl/nBCriLY8i7v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770097989, "uuid": "8f53521d-4d44-4477-ac29-41b895549a57", "value": 69368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770097989, "uuid": "b7c83877-d756-4de1-a1e5-e821e075aee4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1770098125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770098125, "uuid": "26d46cca-dc0d-40df-a291-5d2f51f6c492", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770098125, "uuid": "1ddc923a-6e08-4ae3-9370-46c9e70d9380", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770098125, "uuid": "9287a26b-0de2-4a17-9968-f13f28506f92", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770098125, "uuid": "8886c8b0-dbf8-46c5-9c00-d77f68615f95", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770098125, "uuid": "ec593f18-a932-41fc-a9f7-cd4ddb143be8", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71d58af1-00c6-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770098773, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770098773, "uuid": "fca18bbf-6484-4b1d-86d9-2305211eb63a", "comment": "Malware payload (Mirai)", "value": "ddee72d2ed04eb12094d01bc43763840", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770098773, "uuid": "3ae16d90-1751-405d-bedb-98228d72391a", "comment": "Malware payload (Mirai)", "value": "2f72116275ff18f0d7a787390a653e902de12a73410df2b927ee16c74d77d8a2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770098773, "uuid": "67cab97f-a970-47f5-a174-6b5b7f168c79", "value": "T10C3302D073CD8050D4A846357697FF8A0F90F21EA6C4C03959AA1A2D9D7E5AC7D2D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770098773, "uuid": "c7695849-7a43-439c-8293-ed7487ecf075", "value": "1536:Ay+va1I73pU0R2r+lhiHFNkL8y6YL1S8hrAv9DJ4Inouy8qqn:VsGIdUuKOACL76YL1raVDVoutzn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770098773, "uuid": "7f2a4494-5c47-413a-ac77-251904c9d687", "value": 54620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770098773, "uuid": "8b5db18b-343f-43a4-ba98-c7622766256b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c0b7a40-00c6-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770098790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770098790, "uuid": "77cc23ae-f848-4e85-a952-b3170a01f839", "comment": "Malware payload", "value": "464ea60bd733ac7e179938bd4c3c596d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770098790, "uuid": "31502ebb-37ee-4b1b-8c0c-a0935e9dcff3", "comment": "Malware payload", "value": "33a505a3435769e521574d289a382a90a0170df4be04885c468fb4bf12038bad", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770098790, "uuid": "52fec34d-d273-43d5-a1ef-97418694ac3f", "value": "T1A2E3F97F83F6313572038359F5A2A72896ADC233EB410ED2F9B69A9C8FC11A141771", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770098790, "uuid": "b3b49ed4-64eb-4972-941b-9dbfbab88497", "value": "768:1ZdapEbrTXlGRNjcXscJGcz74k/tHcTwAzeqsfifRfiVIrePfHKIYW7uoFSnUh+7:dapArrl4k2wrqoIrU7QA4YZhJgb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770098790, "uuid": "26caa504-8bfa-4e65-8695-95b3c1d00984", "value": 147860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770098790, "uuid": "bbfefcee-d959-4674-ae5d-349e58463a93", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3565420-00c6-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770098910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770098910, "uuid": "24d3c309-9f6a-4cc9-abae-9cff86c5540b", "comment": "Malware payload (Mirai)", "value": "1fc061e1c0624309c1af7b0e562f466c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770098910, "uuid": "9e302969-86c6-43a6-afe4-65be7efa20cf", "comment": "Malware payload (Mirai)", "value": "cce4435d0041bafa709a37b44f5bae69c328c703f208a460d5d715191212005a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770098910, "uuid": "7af684e5-6aae-49d8-95e6-4b53f0152ed2", "value": "T17963028DE82A2904DE99A0FD954D07BEAA1DE0C362D80F9C7B00DC8793171977A5E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770098910, "uuid": "3ea664fd-7754-4c2e-aff4-ab5c6ff89ec0", "value": "1536:kVHfKPBWjkE0XhS74vhUGnRIG998asF9sftIz/RgXMo:k2BA90Q74vhe/asF96k/WXMo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770098910, "uuid": "33c13848-02e7-435b-ba7d-f794236e18d3", "value": 71564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770098910, "uuid": "c309b5d4-3981-45d7-a9e8-37d2f50a1f76", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eaa81803-00c4-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770098911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770098911, "uuid": "1e18ea04-56bc-4cd9-9500-af312e6b204f", "comment": "Malware payload", "value": "8028b3b2efd79266e71a08495688c5ff", "object_relation": "md5", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770098911, "uuid": "67f7971f-cc14-4560-b88a-0c7a43e30048", "comment": "Malware payload", "value": "c5d455dcc8529daf8a13f7e0fa00787df25031e1f997a2335a03b9b068230645", "object_relation": "sha256", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770098911, "uuid": "3d1a8f0e-e847-4b6b-986e-b7b694662a8b", "value": "T1C5312A063397141AEB202F3C3B83D5E59D1225452E7631238CFAD48E6A91DB7ACF81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770098911, "uuid": "b380acc7-00de-4535-b92d-f026fdd6106c", "value": "24:93dYlnYlSV0anCJ3kkgSZjUfBq1VbDQL5BL2KinhyrywlXrbD8oxYPYrW3BtScdh:93+n8SVFVq4PLtSEpXPD8o6PomyPe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770098911, "uuid": "0e91cadf-badc-45ba-a4f6-597dce6b7f6b", "value": 1591, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770098911, "uuid": "f5e07cc3-7c0d-4b33-9e09-8fd14d8e49e3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe75e729-00c7-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770099439, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770099439, "uuid": "53248cfb-5cbb-44cc-8eee-89d96007f512", "comment": "Malware payload", "value": "1455be1f653bb2fab23dc274fb6cc719", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770099439, "uuid": "5a544b67-afcf-4033-aaaf-dc2e456ed747", "comment": "Malware payload", "value": "0dee384430e3e0b20101eba35761487845308f973658d9ac2ea42dd52cba1f33", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770099439, "uuid": "272e12e8-9105-4f53-a2ad-0265f74a7231", "value": "T103853186F603ED4BE3C4E8348825DA76626637BE97F34879BC5CB5D8F26A5533014E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770099439, "uuid": "f04e8695-1f2a-44f0-af19-ed6bfd93df34", "value": "128b7fdd85c475913d250fe1fce24325", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770099439, "uuid": "0706378a-8a2d-4cad-a799-d30970f770b2", "value": "12288:Nn5mn8e1Q0WLLqiGic+Y3YQqLWQc0qpb0qD0xc:a8CQNCiGic+Y3YJLnq2qDF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770099439, "uuid": "58764ff1-905b-4be1-abb2-64e46f9967ff", "value": 1857024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770099439, "uuid": "3dbb7b19-0a7e-47ca-994f-f46b633acdc9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a42da81c-00c9-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770100146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770100146, "uuid": "63142b7d-755b-4ef6-8676-387f1996da2e", "comment": "Malware payload", "value": "0ca257674770fb156a9e2479a31cf474", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770100146, "uuid": "50704520-012d-4c21-9ab8-7d573d3d0b4f", "comment": "Malware payload", "value": "bf46eba3aa4ddbe66bab4eb03b422b887e8390c424ae1cef31cfe8c688494a68", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770100146, "uuid": "332c8d40-55a1-4b8d-a1e6-f1db735f42c6", "value": "T1B735CF42E794A96EECF783364B76476681164C2ACB53E3838DA5763C0CFB5C08E59B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770100146, "uuid": "da1f2098-aa65-4d59-b304-93006b924d90", "value": "24576:hcnjqq6MW6Fmci7HtgRbaLCOBVfYsUgSjsEjL:hsjqL6FyCb8fFUgSwEjL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770100146, "uuid": "a453e80d-f42c-42a5-9b40-abd51b71b85f", "value": 1126017, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770100146, "uuid": "d721cba1-9ce0-4b69-8303-d194fe2de53f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bcf6eb1-00ca-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770100347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770100347, "uuid": "2f5fc582-ef22-4b58-8f3b-655bb331eb54", "comment": "Malware payload (Mirai)", "value": "326bcd8de8cd0b36c90351392639725d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770100347, "uuid": "c4aea691-07a2-4bb8-8f84-f36ac754237f", "comment": "Malware payload (Mirai)", "value": "3fc0eee8e47efb1969cec1c2568c87aab29c6a82a963b924a801c54619a8b2f2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770100347, "uuid": "cc51b33c-95c2-4e0e-9362-3299f6fb460f", "value": "T13A33F1E46F6E8BC6F0E8E47F903D770E1680740A3945E8AFFA6C161A79A7DD422146", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770100347, "uuid": "d6fd0c26-f186-412f-a4bf-f69e76c58502", "value": "1536:/9qUv9rEvb4FucZME0jdAlZ+7fEnouy8Zqn:JZEvQCE08Sf0outUn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770100347, "uuid": "406321fd-d378-4b0b-a1f7-f309d9dbb003", "value": 52100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770100347, "uuid": "e5586b76-e6fd-4674-87ee-28340f0e223a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b1976f2-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770100748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770100748, "uuid": "00140cc8-eb9f-4a0a-8797-3032b4bccb8f", "comment": "Malware payload", "value": "c12cdf419f41cd95fbef1d8aa0015220", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770100748, "uuid": "fd5e9161-7136-429a-a09c-290e76fbbb46", "comment": "Malware payload", "value": "22958761f8187604162d18663bc59366d525c3b568b39f7ff0dc4bcb8e742d73", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770100748, "uuid": "fdb6bea5-bd82-4d50-b483-509bd159d056", "value": "T18474FA48F629A13F83F660B9111F530972398035A94948ADBD68D9E8BCF4D0B127FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770100748, "uuid": "b0d1b98b-f283-4041-961c-269cb3210448", "value": "6144:IJ6LW8utVQm4vGgEc/SLk2wnULAp0T7O95JakNZJsH7H:u6LW8utVQm4vGgEc/SLk2wnULVTyNZJO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770100748, "uuid": "53936dbd-a401-44a3-ac08-285d4b53a095", "value": 357832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770100748, "uuid": "4d0fc15e-573c-44bc-b304-15d9d876fa39", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b3de2aa-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware payload (ValleyRAT)", "timestamp": 1770100749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770100749, "uuid": "4f8ffb64-9e21-416b-88c8-a0f80e520774", "comment": "Malware payload (ValleyRAT)", "value": "b881ee902102572a85080bec53767b0e", "object_relation": "md5", "Tag": [ { "name": "ValleyRAT", "colour": "#4EFAD2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770100749, "uuid": "c9e24d52-46d9-4042-87f1-d5df95f4fbc3", "comment": "Malware payload (ValleyRAT)", "value": "aa94291f9f25c61f4ef1181043c6c402b238774620603716ceea6412a9f29cc5", "object_relation": "sha256", "Tag": [ { "name": "ValleyRAT", "colour": "#4EFAD2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770100749, "uuid": "2e5cc370-f47f-477a-9b9b-e8e364e2ab8f", "value": "T158E4239F065A09406AFAD680A90F675CDF96D16D72D3C28F2F1B25381123ACF41DDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770100749, "uuid": "9844cb38-95ba-4345-b7f3-281404dfc0f5", "value": "12288:jthfEByFfRK6bhiNq9Ep5UkOgDJxN+9IAjSN7d2japGxD5n7:XEBoRKzmEEUD5+9JjSNBEd7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770100749, "uuid": "11ba5bef-32e5-4372-96f5-928fb83ae164", "value": 702145, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770100749, "uuid": "1a2b515f-5b9b-401c-80bb-5e95e7e8e85c", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12bfad00-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770100761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770100761, "uuid": "2ddd5230-6255-4881-b22f-a516575f5dd1", "comment": "Malware payload (Mirai)", "value": "c863395b8284254ef1ee6b7962ddc4c6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770100761, "uuid": "86cb6b86-1562-400e-b8e2-113094ff1cf9", "comment": "Malware payload (Mirai)", "value": "74c4ad799b5847fc5447a8c707d6bc173468469f0245a240c6804fd100f1711a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770100761, "uuid": "0fef4aa4-6c23-486b-9560-037cb201cc30", "value": "T1538312F2F259E572C6594833476D680FD2FE69C1F2ED20973758EFA08D84421B6F24", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770100761, "uuid": "de7ef6a1-5e43-4ee8-8b91-5a46e2cf23dc", "value": "1536:Fnbeh4bY4BzMmeOJxsON3MEhyp22eWxnn9Spw7gsUt31xHJ/LxWS3F:IEYmMmeWqtneCIw7WN5xR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770100761, "uuid": "a5f8fc9e-3139-4dfe-aad6-ec08c8dd8f8c", "value": 82648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770100761, "uuid": "1e444c30-e18f-483c-98a1-7281e31a8971", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16734bfe-c902-11ee-b9d1-82aee05be84a", "comment": "Malware payload", "timestamp": 1770101049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101049, "uuid": "d34f1cca-f6a9-4c30-acfe-1a7cb3a084f9", "comment": "Malware payload", "value": "3a9349af006440c7e0da677724551239", "object_relation": "md5", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "AV.lnk", "colour": "#072ce5", "exportable": true, "hide_tag": false }, { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "ink", "colour": "#552ab6", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.lnk", "colour": "#d92883", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.lnk", "colour": "#d1c6ca", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101049, "uuid": "58c42f39-ab79-4911-831a-c059ac3cf431", "comment": "Malware payload", "value": "00401651af3194ede5157004b6dbe1edf836a94ca182221f2c034201fe55e4dc", "object_relation": "sha256", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "AV.lnk", "colour": "#072ce5", "exportable": true, "hide_tag": false }, { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "ink", "colour": "#552ab6", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.lnk", "colour": "#d92883", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.lnk", "colour": "#d1c6ca", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770101049, "uuid": "4c3f6d16-698e-4573-8e06-0dd772b3c43e", "value": "T13C41E2019FE70B3ED7264234AC76A251533B7555F8965F8D9040478404B3401916CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770101049, "uuid": "a5d100ea-d001-48cf-9b92-d77e77b93a12", "value": "24:8NqDOlC82vUKJU1+IMJ941y2bY6HoIab/C8fn1vURXTUmu3+IMmmt:8aVnvZJUdMs1yE3HVabhlUymu3fMm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770101049, "uuid": "7d166d4e-7e6c-42ea-8107-6786cc0faf7b", "value": 1952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770101049, "uuid": "ee671e68-f6c0-42c5-8e62-a6583ffce1c9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8db2d3e-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770101067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101067, "uuid": "d7481d69-dc94-4b71-a595-21cd7ea49ed6", "comment": "Malware payload (Mirai)", "value": "4b7c0b2a64c3ba82ba5812212a41266f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101067, "uuid": "b25b9668-50c5-4ba2-9ccb-5167f3cd77b7", "comment": "Malware payload (Mirai)", "value": "6fdc6ce2869152411d2627f85f98756ec7ed4594230191a489263b494ff66361", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770101067, "uuid": "e2c8c130-1b36-4b28-a150-a48b25567ab2", "value": "T1B86302795B42B8D5F121B678154A57612D300EB7CAB0EC9A4BC6FB715AE30E2780BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770101067, "uuid": "78a7fa87-ba79-4176-99f6-4a0217ad35d0", "value": "1536:hjkZro6GXws6agG93O7UgywsFnp1hmf73Qh+q7T5lfeOZlyTKVqYJ:hoJo6DaN+byXFnnhIq7TXfRyeVqYJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770101067, "uuid": "f2fc55e6-a7ef-4835-864d-109abd5772ff", "value": 69200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770101067, "uuid": "f5a194de-c95c-4c5b-bc9a-bb52e2965d5a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34c013dd-0000-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770101466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101466, "uuid": "a3221a9d-ea55-4e2f-af7c-623e9d40a63c", "comment": "Malware payload", "value": "a96af48a74c4b052f11f6ec6269c0008", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101466, "uuid": "4c2c0c73-ad73-4738-925a-75e25b3f0ab0", "comment": "Malware payload", "value": "cd817aa081299f91374034febb7a87d9a07de869805899d375cbe2691ec464f3", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770101466, "uuid": "fdb9c897-9632-407f-b66b-3fb977661bf7", "value": "T10D36CF7B190A6EBF4EBF3E14D4140F4E8C28F857532C82E8BBD2A57582F25049579E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770101466, "uuid": "47f06d5c-4156-405d-b9df-6c81779e4ab8", "value": "49152:AbmkrxhdZw5MNyr/ElYXXe4njLJf0Sa3lZUreJp6MIk:s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770101466, "uuid": "a3e9974a-946d-4fc4-967a-c4db4f2fbd0d", "value": 5085280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770101466, "uuid": "b76fc986-2a9a-4019-bd84-05dfc508ac36", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b72e6758-00cc-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770101467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101467, "uuid": "043323ae-274a-4237-8771-cc7a130ed19c", "comment": "Malware payload", "value": "102c401e257ea8fdc6fc26fdb19509be", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101467, "uuid": "f68e6765-ff38-4cf7-8de7-81b84ff01492", "comment": "Malware payload", "value": "5875e4c7fb820d872f8b6e2c73cabc25b5f11116437ac4391cd1bde25b1cd6da", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770101467, "uuid": "bdab282d-e046-4e42-a049-24023a22ddc5", "value": "T1F315AEF21402BE5B577B0F90D0483F10EC5915A77B28E9A879C832E701A669C9EBDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770101467, "uuid": "8d7c0768-7bf0-444c-9058-cee6ae142154", "value": "24576:0PnSlxfr07wACNREd3PcaWYp3WX2kPIYCju/ohx1+v:0fSj0zC6vpmXAW7v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770101467, "uuid": "c7d21dc7-f123-46dc-a1bd-6b3dbbc27098", "value": 888632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770101467, "uuid": "c9d29157-c507-4919-bf12-b8308af1ceba", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed38049b-00cc-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770101557, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101557, "uuid": "e55ce4ca-afbf-4daa-8129-a238c9b501bd", "comment": "Malware payload", "value": "162465472b34e4a86539b0cea686a60c", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101557, "uuid": "42517003-606e-468e-ac06-89ed2ada2ec1", "comment": "Malware payload", "value": "01742ac49170d0604f42974eeba7cd94a7a3b0e9b695a7da000b1deeb9efeece", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770101557, "uuid": "217b7812-a245-4ac4-a0d1-959cbeff56d9", "value": "T140461223A38D673EF06A96374962D930593FBE51691A8CE787E41D4CCE3A0501E7EF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770101557, "uuid": "6ae48f82-e263-43f7-aa79-9e29b923432a", "value": "e8ac1646024d52d1534a88da2e8037cd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770101557, "uuid": "d3e686d8-c34f-4150-82ef-d1bb98f43809", "value": "98304:dnfhrIVUzZG9QYxdGF6NTp2cN+vHwLKAIuRwcM1tFKJXNgQ5XfRth31d+XbwjLAd:dnfhraUVG9lku9OQL6uucM1oSE5H31dE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770101557, "uuid": "0c430d7a-fe22-48b2-9070-181809f4f18e", "value": 5657803, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770101557, "uuid": "fb0e253d-f27b-450c-9f5b-a7dc77217cc5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74bb3d2b-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770101966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101966, "uuid": "c4cf3e7a-2de3-450c-837f-be8a5e5e44b8", "comment": "Malware payload", "value": "f4d00187c40779496d03f5bcb6c57a92", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101966, "uuid": "b1a828f8-42c3-4e17-a23b-401303d03bc3", "comment": "Malware payload", "value": "89d406c826d6fd125c3379d8710b5790b16a3d1b7eb9265e8a0919880fe195b2", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770101966, "uuid": "f967e067-a0ef-4e9b-a969-c4f6b0e0beb8", "value": "40C2F2A01363264AD762CEB83A69341FC428615731691D402CD1A68FEE5FF249879FFE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770101966, "uuid": "81469f97-86c3-46e5-a715-f0d894d3a187", "value": "384:yb2eX3zAKuiNPZRwwqdvrrduMXbCAk6Y5VvCYxy0kJXPav63BNjh:/kAKuobq1rduMGAXSEYEYv6Djh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770101966, "uuid": "cbb9c5cc-07fc-420c-a57f-11fbc4e47340", "value": 26828, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d5f5fb5-00ce-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770102148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770102148, "uuid": "493951a1-83d9-4132-a681-cf98d5b7136a", "comment": "Malware payload", "value": "4b5eaa8470090b3192ade5a1ba28d3f2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770102148, "uuid": "a4aa480a-152c-4a96-b060-52e4fea57410", "comment": "Malware payload", "value": "2c1d32f625d9e8fa9cadffa4972ad686b3c4700757cd9bab777b58b295c302d2", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770102148, "uuid": "98227cd3-64b3-425b-9d03-93240acc4d99", "value": "T1F547234A96DDE3E48BC20584354A04CB34D4A59E80FE9A383FCB9C127654E6F45AED", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770102148, "uuid": "c4e36754-3792-4764-8219-812c32b9dec2", "value": "f71acb5fde9b207f9af5f14af4e24cc7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770102148, "uuid": "31ea8e9c-8020-4436-adcd-cef3f482e4ef", "value": "393216:qCkhWXK3ASmku/pSo70OrVgesNK2OoyH9BqXYAjxkjbe0CH8h:qFh/3A4Ro70+KKXOC20ma", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770102148, "uuid": "a4350875-9da0-4f33-9192-175266aec418", "value": 26663936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770102148, "uuid": "31d2010a-aa65-4116-a673-a99187a2cf73", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84476c69-00cf-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770102670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770102670, "uuid": "153d40cf-1e08-49f3-a5c5-11fe5dfaa7e1", "comment": "Malware payload (Mirai)", "value": "8074599d0e7fb51085462056a7085c98", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770102670, "uuid": "34dd87b1-22ed-45d3-8817-0bc38bb939a2", "comment": "Malware payload (Mirai)", "value": "fc95793bd7860271060530b9c522f418f3acf0fd56124dbce52d5e14a3ce0da5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770102670, "uuid": "a86a2e31-d4de-49b4-9cd0-12dd01ce9986", "value": "T18053024222ADA467CDD41EB5F8F04C852D3CBBF8A4E935FA726D457DC8C8422B688D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770102670, "uuid": "507fb1a8-cfb8-4acd-acac-513bee7bf128", "value": "1536:bRPjtl/CW74TC5t3kDdqd3nA2UYIDEdt7ftRyf0IFEPnA:btjtH4TCX3md0nBUY/pYf1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770102670, "uuid": "03260960-2c09-4139-9948-3d5e0cbe10ae", "value": 64820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770102670, "uuid": "25e47475-231f-4af5-8897-3387be814897", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c209824-00cf-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770102710, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770102710, "uuid": "2d7fecb6-593b-4a83-b85a-21cb8959d707", "comment": "Malware payload (Mirai)", "value": "a13c2a131b20470bb96168f8ca545aaf", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770102710, "uuid": "5f10e038-85b4-4b43-b581-067dbe54f81c", "comment": "Malware payload (Mirai)", "value": "bf513544937e1492e9391e0cbeb6eb1b3f9933e882fb771309ccc46ab05d8e63", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770102710, "uuid": "69f68cfe-6286-4367-9dbe-9c2e5d747ae0", "value": "T16BE2E09252C41572DDF348BBEFB1428375CA15A8E29F34822774436CBD4AC868B9E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770102710, "uuid": "45aa739b-ef1d-4e52-bf46-4c2f252d4e9a", "value": "768:HRcR/2Kw9oZpsE7jwwGqJ1PU0pxhWDG43UWV:uROKiKj7DU0C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770102710, "uuid": "e603aa86-9ff4-442c-a90c-bb03d4a4f460", "value": 33140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770102710, "uuid": "79475cdc-8dca-4259-9475-c2486af696c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6cd68bb-00d0-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770103211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770103211, "uuid": "3367532d-50e0-4356-a487-ad2ec6cf1b92", "comment": "Malware payload", "value": "b004a921d27e4b73c95e36f0b9e2c729", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770103211, "uuid": "3fbb3f85-6a9d-4667-a5e5-24270f5cf4c3", "comment": "Malware payload", "value": "9cae1341d1739ccb1db4fbec8194ca3831117df42a3bd018bfb94b7ee59650b5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770103211, "uuid": "cfbd636a-e353-4af8-8873-cf4c689f59e2", "value": "T1B68308327589582A210B028FD263336C70EFD8E2D611E5B6F7F622344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770103211, "uuid": "17591945-ed85-4e3b-b31f-961c39433287", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tA5kDXpdyr2pbnZWaIVN/:XEKltp9tAEX/yr2pbZWFVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770103211, "uuid": "94359837-b604-4708-a826-459b685e0365", "value": 85102, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770103211, "uuid": "0f4866fc-0093-4445-aa0e-f149c6cdc154", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8b855eb-00d0-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770103268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770103268, "uuid": "16386f07-1d4d-4bb0-8f05-b6ca82a241fc", "comment": "Malware payload", "value": "6371a6dd5a73179c031efbab0d9b9976", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770103268, "uuid": "3235b805-8d6a-4b5e-8ae1-c49491e4d056", "comment": "Malware payload", "value": "6816374ffb212644703d34c251da526b29b2fc588ca741334cad5dee5d91afc3", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770103268, "uuid": "fbb45314-44f0-49cf-8083-06b6f24c6ddd", "value": "T186B5E041BB989E1EC877D1360C1A9231601AED63CB038387D8786B5D28BF6F44F567", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770103268, "uuid": "8588c205-3cb7-4693-bf54-04acfbb927a0", "value": "49152:eVffhoYEZdglkMrNZ9FficNCTUdfC6Wdjsdl/5tvARfXjwbhI:wf5q0kMJZ9NicNCARWav5ZARfX/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770103268, "uuid": "9ad20f30-3c3c-4834-8792-c7f63d18cf17", "value": 2420800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770103268, "uuid": "75d64774-eab6-4c23-983b-35cf5240756e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8ffa475-00d0-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770103268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770103268, "uuid": "66f83328-5857-4176-a3ef-b179118656e2", "comment": "Malware payload", "value": "c7981a89ddb89059d1233ad91a1de3b1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770103268, "uuid": "038c2a5f-abda-4ace-bfa0-b0967798b9e6", "comment": "Malware payload", "value": "94813d9305ce6388787137d7f055885f53bbd806b143fa7a35e532809ddb7023", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770103268, "uuid": "ebcad725-80ae-47b2-a6d8-91d6339fc0c2", "value": "T1AC06E007FB45CAA7C9BA83F16F370D9A2A130F54CA429AE70454767E2D7B2C50DC1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770103268, "uuid": "e545eef4-d458-43d9-a7ad-99e86c2741cf", "value": "49152:Z6an5ww0wQAVds2ajrQObsei9xMkB6kT2mhxOBmzYzdGGqQTOVFU7Yqc0cgd9WMc:1n5wEnYw9x7BDtOBmzYzBFTA0td9Xry", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770103268, "uuid": "a2f6c141-09de-4d96-8528-35f52cd567cc", "value": 3952981, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770103268, "uuid": "4d712c91-47b7-40fa-9b85-4bb8c36c7149", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9080647-00d0-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770103268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770103268, "uuid": "3aa59cd9-fead-44fe-a45f-bc244b88b155", "comment": "Malware payload", "value": "49643d087472463e6f6df28de8863e08", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770103268, "uuid": "3eebefda-5096-40db-8a18-3da8990c479f", "comment": "Malware payload", "value": "7c5157625475c05495d0bb8a3f8f3637330f595335d0276efdf57cf760fbf971", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770103268, "uuid": "96546d49-d6a5-4cae-b21b-335d43ebb4c7", "value": "T1B006D047FA49CB87E4BEC3F46E232CA95A171F14CA9296DB8128376D2D771D14DC0A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770103268, "uuid": "58fa8fe9-cfbb-4253-819d-2388b9a2553f", "value": "98304:5pozBQTymzm9mXH0tiWTYVT8mGqincAy9LEDoBzbt:5N9zm9mIiWTU8xYJE8BPt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770103268, "uuid": "0362c0c5-6b7a-4635-bd94-2b18be2e1470", "value": 3931593, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770103268, "uuid": "cd1430b2-2e82-4827-b3f3-7e774b1f06d6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a23e9e33-00d4-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770104868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770104868, "uuid": "03c8b473-e17d-4c99-93fb-2621382ef964", "comment": "Malware payload", "value": "d20c0361d85248bb2a592470b2ebdd27", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770104868, "uuid": "b93d05bd-6f9f-4d47-a368-fd7b82a9bafc", "comment": "Malware payload", "value": "ec8a31c2fe4729a0175db2b627002ace24375c968a98d49f3edffc42beabeaac", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770104868, "uuid": "51a9366d-ffc8-4eb8-aff8-e974908883f9", "value": "T1355412C4923A490200635D5CDBF9253BB2271BDD5E50638FB98393B37EA948161EDC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770104868, "uuid": "b22b00a7-12f7-4253-9718-31942dd8bb5a", "value": "6144:0zMbebYPHAeMS7bWPbzT9fpUjIbdEQoXJivt1wQyzQ3Nr2xPSZo:0UebYHAeMS7cbzT9xEIJEQYJivbGQ9r+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770104868, "uuid": "4282948c-3c1b-4109-92b2-9cf0d8020e89", "value": 283719, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770104868, "uuid": "06efe1c4-98d3-4edd-8422-516eecc5509e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b871d86a-00d4-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770104905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770104905, "uuid": "dc80f264-4da3-4f9d-953d-05cce3a1edfd", "comment": "Malware payload (Mirai)", "value": "fcfcd5b39288ceda4baa5e62c565d67f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770104905, "uuid": "c34d8fa0-055c-470f-8b17-8ff5f0441dde", "comment": "Malware payload (Mirai)", "value": "0c88d4ebb544bcd168fd5efd2857d5c952d81c131e606ce7226f70246799ac6c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770104905, "uuid": "20fb56f9-14fb-4df5-9ffb-e32480558424", "value": "T11DD3CF32E0086DA0DD2116B4347659BC0340DEB40BD59243EFBEE59E28B7DA57DEEB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770104905, "uuid": "61195081-785e-41a6-ac9e-57a09a205615", "value": "3072:kNulV+GOAc3YSmDEjdX/VuHVv3WDRGGRhaUNZkP0Z0a:yulo2ubIVv3sXL5NZmO0a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770104905, "uuid": "8b0774c3-68e6-4bdd-ba87-26d49579097b", "value": 131656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770104905, "uuid": "132de286-c797-4104-b80d-716b768fef58", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f939bf63-00d5-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770105443, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770105443, "uuid": "0df60148-f1c8-4a19-9783-e5e44c626c23", "comment": "Malware payload (Mirai)", "value": "84b53d6b4a2d6674ae76a5d6afaf6104", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770105443, "uuid": "3b0ed537-3f80-43cd-b3f6-b11f0f487a63", "comment": "Malware payload (Mirai)", "value": "52971d44f240e3b25e5f4a8e2bee7bf0536dd7a22708a37fb5f853f4ab7aa5bf", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770105443, "uuid": "1169e458-80f8-4401-ab52-334cd266979a", "value": "T13CB3E085B210AE55C02272FCB1870A90D3B16E7B4B9A150B4473F5B46DBCCD47E1BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770105443, "uuid": "68d19251-0474-44ae-be6c-60960533200b", "value": "3072:X5Apzl9NOvXoVLAE375lhYy5SkOXNwug:aevXCLr59hmNwP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770105443, "uuid": "9984e1e3-ec48-4071-8a3b-e71cfc9ac7ee", "value": 107680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770105443, "uuid": "689a8e85-6d25-4438-9dbd-7c17a607158e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd518638-00d8-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770106658, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770106658, "uuid": "d66ac594-09a4-4c96-bef1-102bdf1a6786", "comment": "Malware payload (Mirai)", "value": "9b50982257feed17621abe6cc98a5780", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770106658, "uuid": "69d4de9d-8b13-438d-ba99-18ac2fca3a72", "comment": "Malware payload (Mirai)", "value": "c1492cb7bd21a48c80f51e360e3bc342d03d4f8b8654946ab62f7c38b1c1658d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770106658, "uuid": "87294575-f542-40d5-9d34-feeeb2d4bbd4", "value": "T1A004392F258192F0F6411B746BCFD3976C390BBF51A9909F6B416329B6E0B7BA02C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770106658, "uuid": "fefdc509-4824-4a33-94b8-ec3f0c73b79d", "value": "3072:7mflblbBDfvNUZem/LVA7bGQU66gOVNLddnNgRdgJi55wpUX9:7IJ5k1DVA2nDXNgEJi5aKN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770106658, "uuid": "bbb7afbc-0f31-4009-9ca0-cd247a72dc85", "value": 180808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770106658, "uuid": "90763d86-0fcb-417a-b24d-7a0bd91862dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16f9f62b-00d9-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770106781, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770106781, "uuid": "d7f813eb-1bf5-4835-8669-bed5c1803995", "comment": "Malware payload (Mirai)", "value": "29bd9406a2d4f3f3fb56a221bea80140", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770106781, "uuid": "6bd36f4e-c6c2-463c-a47c-97da35de715e", "comment": "Malware payload (Mirai)", "value": "d58da9ab1b39d92a415aea6b342d9dda7772cc5ad477e7d167d9fded644b2254", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770106781, "uuid": "bd670b46-9527-4d1a-9252-c77d98b2e8f1", "value": "T1CC146C2BB3C39CE6C51063308C316362776FD7081958EAFFDA1B3794A99772256246", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770106781, "uuid": "d2f17e82-c781-4d08-a856-c1a141834219", "value": "6144:zNROm5155gL6mTX7zRR1Lwt8Al7IKTtR:XgLnLzt0ll7Is", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770106781, "uuid": "0d95bf8f-a2b9-4133-b7d4-f222804cdb3d", "value": 197352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770106781, "uuid": "ab46eedd-3295-4a82-8a39-47e710c3fdcd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1067800-00d9-11f1-8b2a-82aee05be84a", "comment": "Malware payload (DarkTortilla)", "timestamp": 1770107067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770107067, "uuid": "cae9389d-9036-40c4-87c5-0a226f985284", "comment": "Malware payload (DarkTortilla)", "value": "bf9723832839af8421eeb2f0aa90d9d7", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770107067, "uuid": "6f4207de-4db5-4cf6-8acc-0232128579cd", "comment": "Malware payload (DarkTortilla)", "value": "4bbaf2c0e096f390359f12926d0a63a326493fd126b24c7356cb1e1a7600e771", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770107067, "uuid": "0b31b29d-39a5-4b85-9867-5c5bf71db9ce", "value": "T14E65E01613E956A9F5FE8B3C63B9006443F0BA1BCB21EB6E794941EC8821F47D5623", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770107067, "uuid": "112ace73-4830-4769-9889-7dc4e79a4f9e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770107067, "uuid": "e93fd58c-bf63-444d-8cfa-f3721bf31ddd", "value": "24576:eSst1d5R43L6c/ryCnRveYepqMKDmfC4KOSSn2F6Hk3y:Yt1d5OB7RveYkqM3fC41p26", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770107067, "uuid": "36282936-9027-47e9-871d-0ec0e6a97dae", "value": 1436160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770107067, "uuid": "cd2cb07d-bb95-4665-9386-a78d691237c4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd8848c4-00da-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770107598, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770107598, "uuid": "1b13f244-5c8e-4612-8ade-0da567bf9623", "comment": "Malware payload", "value": "e3db684c7e87dd0ea46c7207bbcd84d9", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770107598, "uuid": "97b177ca-a08d-4958-8898-7b5e11f65162", "comment": "Malware payload", "value": "c0b1fa407b6f1c7a2c0636febc35adf5494f887dd5001be9bd5fab0870ad2ecd", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770107598, "uuid": "16092fa1-5cc5-4b2a-9e8b-fc2110e40222", "value": "T11A061100D962DEA4065C912424AA1E8A25510EBB0C583B793F9F5F9E1F9F20FD0797", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770107598, "uuid": "bf42d9df-b142-413a-a160-ac6727c3ac77", "value": "49152:Hi+wnr/Z9fvKP07wqth2hGCN9o2Fby4eZ1zAA/QMOPL:n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770107598, "uuid": "6779e644-3834-4bba-8302-d18d1a5db241", "value": 3730033, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770107598, "uuid": "c08698e1-d629-4b09-b999-14bad21e65fb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d2f91c7-7fd9-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770108184, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770108184, "uuid": "9bef6826-faeb-422f-98af-d4e207801ac6", "comment": "Malware payload", "value": "cd9f3165dbc25c9d64ef65947d0e662f", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770108184, "uuid": "40dc98bb-1aaf-441f-8ba9-06bbf13eb915", "comment": "Malware payload", "value": "c3bc14ebd5268aa0048765197eadbbeb0aa2c9f0328790397aea3c064564a52f", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770108184, "uuid": "6f6967c3-3953-46da-b873-7b7df7863ea9", "value": "B32302D0076127888361D93938AE301F8534566F32EA2E103D97A18FF54B716A8B7EFD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770108184, "uuid": "70c90d91-8311-4338-b024-6b1d16a75efa", "value": "768:/kAKuobq1rduMGAXSEYEYv6DjbChaAUKvNvy0OQT23MTGU1DkKpPD:87vbq1lGAXSEYQjbChaAU2yU23M51DjF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770108184, "uuid": "8b737690-7365-4b05-b2b8-6a89ae33e404", "value": 48008, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20fb497f-00dd-11f1-8b2a-82aee05be84a", "comment": "Malware payload (DarkTortilla)", "timestamp": 1770108516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770108516, "uuid": "42f08a60-e447-448e-a43f-7291dd37a73b", "comment": "Malware payload (DarkTortilla)", "value": "a78ba858fc85f931c256858157f0873f", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770108516, "uuid": "aa74d474-6848-45fc-9680-69d82397488d", "comment": "Malware payload (DarkTortilla)", "value": "32c524f67e17759bd86371f0223a5ced01e5b6170f91d294fa54c9c2f0437686", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770108516, "uuid": "c08fd9a7-31aa-4913-8dad-e975683a60ae", "value": "T17055E00A07E92AA8F5FE9B3C6378046443F1B91BC721EB6E794941E88D21F47E5523", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770108516, "uuid": "2f546180-a2f7-4e32-92fd-232ee7b27ff3", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770108516, "uuid": "96496d04-cdaf-4b17-8a70-56345b4229be", "value": "24576:qqast1d5R43L6c/rwpojZ6tm48Yu1KObA5rnF:zt1d5OBwOj94pQG1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770108516, "uuid": "11b75fe0-d17a-4b2e-a363-45053a974470", "value": 1366016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770108516, "uuid": "8e7ad923-0736-4a94-8b92-17c06b1722b6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "484bf11a-00dd-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770108582, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770108582, "uuid": "433f694b-68d8-4aa8-a2d4-ec83c5d9549a", "comment": "Malware payload (Mirai)", "value": "52e8f52ea25042070b739c3ab055339f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770108582, "uuid": "94079d08-3a0c-45f2-a90f-74d787ee4d10", "comment": "Malware payload (Mirai)", "value": "1ad9cfe15013414660701e28b5ca5c44df8d0355c80e5b5f53bf2525f93ac46d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770108582, "uuid": "e9704e39-ee8a-4719-b082-e83aea0c62c9", "value": "T1BD5302271A64C02ED475CA370E1CCC61C77A4158AB248657E66AF6AF3E81E05F490F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770108582, "uuid": "54f7402c-50a4-4967-a893-5c35152ca6f8", "value": "1536:zoZ/Yzn9l6maZh7RybbM6EwryUxNW78z77SshPoAQf:cSn9jaBybw6E4yUu707bhPjQf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770108582, "uuid": "93f3713b-d57b-4eb5-8963-0722d5370bba", "value": 63912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770108582, "uuid": "f58e8bad-ae31-4ba8-8d9f-269944959a42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc4b1607-00dd-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770108777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770108777, "uuid": "9cce54f2-09a0-47aa-b0df-f785bc064b05", "comment": "Malware payload (Mirai)", "value": "26e567fd79129c7bd2b7c604b4525f5c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770108777, "uuid": "775ef107-28df-424a-97f2-88c5b0680b3f", "comment": "Malware payload (Mirai)", "value": "0ecf63fc759032cf8413a97690ed035cec7631b3fc1d557baf7da2a8e84974da", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770108777, "uuid": "5f3cbd47-28b3-4961-a967-2469f032d890", "value": "T154C3F185FB636991D0A342FDA4C00AC387912E318BA217480699F774387DDFB1F69D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770108777, "uuid": "8a88c8a0-0116-466e-9ea6-207f564e0697", "value": "3072:SBdQK+TG2nIjnRdZaUXUSgkLCCVwHWiEiBtbMMTnM:eMQRtXU9kLCP8ifbxTnM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770108777, "uuid": "db3cba54-38dc-4487-b22f-af7c35c6f91b", "value": 127816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770108777, "uuid": "09181dd7-d0c6-4a82-8cbb-dc3277d62ee0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42cc1b66-00de-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770109002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109002, "uuid": "79279828-eda1-4ea0-96e7-14b630f92183", "comment": "Malware payload", "value": "8f7392016241ea59851c08827469cff3", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109002, "uuid": "bda811d8-879f-4918-80d4-c229b55728e7", "comment": "Malware payload", "value": "f97e8623aa90c93c2c7614071bd2a48de8d08c736a3b8dd1fee6a3eda980b2b7", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109002, "uuid": "47bcb3f5-083d-4b7f-9335-5ea27e728734", "value": "T1A505E56428118076EC9B51F861FA2FEE69DE5E200B80EDF751C02F9750726E339729", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109002, "uuid": "5b1e31c5-85e9-427d-9a82-a7e10b151054", "value": "3dba82b9bf867c8cae19b16a3b46d075", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109002, "uuid": "0a1256a1-43e4-4ad9-9d01-2fd1d45cc3d3", "value": "24576:jJk2od7wnHi6fRlZmWmyFzo/9di9Cl2LUMk6i0pUVKprd3NmTSaqBi1MvgNFzaMJ:jSLMoPzaMJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770109002, "uuid": "43a6384b-4a9c-4548-a245-37b696c1bb65", "value": 804864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109002, "uuid": "2d8a14ad-09b7-4b9e-af3b-e64a7f4f6d6d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab7cd46c-00de-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770109178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109178, "uuid": "21397729-fd51-446f-8fa4-a8edd7039ebb", "comment": "Malware payload (Mirai)", "value": "7f3942d04b8abc86b5b4885c58378114", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109178, "uuid": "78a61e35-4615-489f-9042-a924abe35f2a", "comment": "Malware payload (Mirai)", "value": "1c9207b52bdf16c465fe091169e162142aa1307acf592ac8f7e161bc04b81e91", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109178, "uuid": "104a7982-69b0-438f-8472-980623dd0a83", "value": "T1A1D3B021E4006DD1EC2129F578BA96B80350EE700BDE1586EFFDE95E647BD94386D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109178, "uuid": "16a20e75-ef67-431f-a40d-445cb3bd6144", "value": "3072:PHiBTNkAgcly+hoVpE6AKUjq+8biA7JBd/x9:PCdny+hovsmzbisJfT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770109178, "uuid": "f07e5188-e615-44ef-9051-6cd6050b1598", "value": 131664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109178, "uuid": "79091754-4cb8-41b5-8f7f-7bbab97c7099", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770109282, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109282, "uuid": "e4407e4f-91cb-466c-89ff-c9291ff9ff0f", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109282, "uuid": "6663693b-08f4-4701-ba7e-a4e435549e5d", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109282, "uuid": "b8d43a4f-a3cd-4613-829f-ff6ba0017097", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109282, "uuid": "faf06453-ac24-4c77-8a66-a1d1ca44bbae", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770109282, "uuid": "1504f895-b24a-4a34-bbe3-faa4435e1255", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff58476d-00de-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770109319, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109319, "uuid": "15dcd065-82cb-4ea2-8593-91a2ce731c3c", "comment": "Malware payload (Mirai)", "value": "c2ebd68aa7d566172eda9a6ef70a0642", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109319, "uuid": "eee34d81-80d1-48b1-9f78-99a56a0d9dea", "comment": "Malware payload (Mirai)", "value": "15655395472f4b993d9f64d73ad384ef6c9b339fe3481f2b7ba437f5c5f6acd1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109319, "uuid": "cd1b172f-626a-4772-b3a6-aba298c7afef", "value": "T1E963017873EB8434E0DDA931264F22303371DB96A42F53DA3D89B5E9F6565980C23F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109319, "uuid": "157578f6-d47d-4577-9b44-1757fede6e6f", "value": "1536:0ltrI7mDmde7Lletk8cghgLFPjihgulh6DoIGmrPg:0l+YmdkLMk8c5PdulIGmrPg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770109319, "uuid": "65ee1273-07a5-4229-8472-03f28c156687", "value": 70848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109319, "uuid": "3dc6cdfc-e1bb-4170-a27c-c1df6b706386", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf77924e-00df-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770109668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109668, "uuid": "2e49a6b5-8692-4f02-b992-5b22000405b3", "comment": "Malware payload", "value": "abe03538ca4acec87ac5d8da2fac0c14", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109668, "uuid": "a565e24c-c891-4c47-992d-0d0846673555", "comment": "Malware payload", "value": "f9b27b8e64663ae1785f411e9e6bd232c5de5ef0d788b4b493f7d01e1ad2c9f5", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109668, "uuid": "83e563e8-b4a8-48ce-86ff-414383a4e86f", "value": "T1BE05E5A126118036E95F11F1A5FA6FEE609E0E1447C0EEF761C0AD9794726E239B3C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109668, "uuid": "ec7ed505-2fb6-4cfa-8db7-08955b4f4ea1", "value": "36c942f3b6ba2b099504be955e1d672f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109668, "uuid": "e314a51c-5413-4b6f-b6b3-a1c36d380873", "value": "24576:qjjKLR6hlksSDBLbbTwAWdLHILbbTuLkUG0o9p+Ec1Wbyl3+j77X+aRWBytJ5VvV:qKIh3y33vWlC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770109668, "uuid": "3d83f6a3-b02d-4e0e-8365-42720492307e", "value": 795648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109668, "uuid": "af2296d4-bac9-4fbc-87ad-24514ff55e59", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67048976-00e0-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770109922, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109922, "uuid": "722f1731-0b95-40a1-8c9c-f06d6b24a63e", "comment": "Malware payload (Mirai)", "value": "c9b559b4a8e1def2037f1c5a8ea0993c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109922, "uuid": "80b94fc1-09df-4853-9626-8333624a7fcd", "comment": "Malware payload (Mirai)", "value": "9c2c65216f91d93de214d81bdec0dd067e079d81a8fd618c45eef8437e162a1d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109922, "uuid": "c8ba8e45-acbf-4bcb-9dac-e869137d9235", "value": "T1FF612BFD41A0BF93CC85A94CBA2483A1730B91F5FD72F63C9C584A6A4481B15349BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109922, "uuid": "f0f28337-cc79-4c81-a8c2-2fd1247dcbab", "value": "96:geEUuA1gZW8YKmsKo5MZmzizgSwGMIaMGSweSQ:4Sn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770109922, "uuid": "a233fc57-e5ef-41fe-b3f9-be3aa7186dac", "value": 3211, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109922, "uuid": "50940380-c821-405e-b03c-3e93e9785f43", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2792ee1-00e0-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770110022, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770110022, "uuid": "f9dae78e-46e2-4760-944a-d8684c9e20f3", "comment": "Malware payload", "value": "ab75cadd8665693504fe8b8be7255af3", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770110022, "uuid": "50cb5192-3cd2-4979-a5c1-ee84cc7b702e", "comment": "Malware payload", "value": "ec946c1d0ffda2dc8d14f282ce4989a1c9884e3dfff2461c79282463501fc5fa", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110022, "uuid": "26a1e76d-9bef-4642-b442-2eae37f55008", "value": "T11205076468118036EC9B51F961FA3FEE99DE5E100B80EDF791C02F9740726E239729", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110022, "uuid": "a857d837-60a8-4d7d-af9e-865a819a8d3c", "value": "3dba82b9bf867c8cae19b16a3b46d075", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110022, "uuid": "8464677a-c8bc-4e18-aec3-4469d77d522f", "value": "24576:CZzYhhS0xZ/DYsFVj5Gp/j4Qa/4t2LqI4iRqzzHZBZDgaMqB1OZeRVSRt:Ch4ZUSRt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770110022, "uuid": "49f845f0-e7dd-455b-b3dd-45aa30fcb24b", "value": 806912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110022, "uuid": "000f7100-70a0-48bb-b8ec-c7c6c2049d47", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7a5f930-00e0-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770110057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770110057, "uuid": "24626308-5195-49c5-a6a9-32e7cbdaaaf2", "comment": "Malware payload (Gafgyt)", "value": "443bf7beb96cd3cecd9f337eca387672", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770110057, "uuid": "fa1c0f0e-98e9-4176-b827-2b40c42dabd8", "comment": "Malware payload (Gafgyt)", "value": "99f1d2fa2ab1e6ee7f8550a082f7ef54c16fcd8ef48fe1a419414ff1aa414c2f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110057, "uuid": "d917676f-c9ad-4a12-b614-957f6d3266cc", "value": "T1BD73022B514F4BA3D0E99D33B40B7B34AE78E013E8E52F05F851A095E91DDB6A1046", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110057, "uuid": "a90cff67-073b-4baa-8472-815191810eb3", "value": "1536:mOlDJ9nqHLw+ZQeuFvQfPbYGiNw7VI/rW0wvnEJ3gzE94e/ohK5u7beqNorM:9pn40+ZsvaTYbeO/VwP/zE99/ohmu7bl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770110057, "uuid": "b6d2860e-c4a6-4757-8896-645614fbc8f3", "value": 74732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110057, "uuid": "d320e483-6659-488c-9394-87db0445382a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6d434e3-00e0-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770110083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770110083, "uuid": "67d59ea4-930f-4360-bb53-aca7602b8f0f", "comment": "Malware payload", "value": "0371562cd332de0ad8ecf414ea0dac94", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770110083, "uuid": "aa660962-914f-4b1b-8c7a-fe2279332165", "comment": "Malware payload", "value": "c34db3824807d8d140202f23951e4e276cb7e8afc2b68cc3741ef736487e4392", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110083, "uuid": "84126265-afb6-4252-9d28-6509db895bf0", "value": "T18934F02D9D37AAB60626B347855ACA8B5CD7135AC4C76D276BCD5BB2883D04C930EC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110083, "uuid": "f089ae48-67b7-4d89-8e6d-126b06240a97", "value": "6144:Rx3o1eGcN+wHrxjDDli6ljzfrPZegqQIL27WRqWVlFN6Z:j41ezbLxjDs6H6VL2CRDVQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770110083, "uuid": "45bd15a3-1c6d-421c-bf6e-c070fed922a7", "value": 247886, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110083, "uuid": "b58aa0a3-2131-4984-953f-9db4ca315d9f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "302edc02-00e1-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770110260, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770110260, "uuid": "2506e0c7-734a-4138-a53a-2644abc04b3f", "comment": "Malware payload (Gafgyt)", "value": "2df216e6c01b82b90a5cd528a5695dc6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770110260, "uuid": "f273493f-39e0-4b9d-ab69-18a0c8f5d1af", "comment": "Malware payload (Gafgyt)", "value": "326edf8286a81926b1a445ba0bd175023f459d7f97b1183291cca68950319b30", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110260, "uuid": "b6a23d9f-e43e-495e-914e-77f1ae8c5360", "value": "T1015302E050F5B465C62293B662044F0A268ACE92BF05DCDC30CE135B6D8AF9F1F995", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110260, "uuid": "8efcb522-b079-44fb-be68-c0c18f42f6da", "value": "1536:XznwRRM10ac1B010ZtaS4SV/zQUjsPwttl6vTNs/Lkg4azHT:TrREB5taUVLQlwtt0rG/LGazHT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770110260, "uuid": "799fb054-92bc-4500-9e0b-dd1ca7e5483c", "value": 60788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110260, "uuid": "c8f81e37-00a2-4337-8196-ebb7243bbc20", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfbcd37e-00e1-11f1-8b2a-82aee05be84a", "comment": "Malware payload (PhantomStealer)", "timestamp": 1770110500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770110500, "uuid": "70a94535-3f9d-49b9-82eb-f77b7faa2b42", "comment": "Malware payload (PhantomStealer)", "value": "dd6e3b86ba69fec23d7591a047a079df", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770110500, "uuid": "aae573c4-ee8e-4570-903f-1dc4e9347757", "comment": "Malware payload (PhantomStealer)", "value": "a53e0cef9c96e6e71bc41a119e500e1ace15d6c23cbd22a0f25bc0a9f8b7dc7f", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110500, "uuid": "46970def-5c9c-4650-bdfe-c77f6a875a3d", "value": "T1A685F11613E85AACF5BE9B3C4739451043F1F85ACB36DF2E7989908C0821F87DA663", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110500, "uuid": "dfcdc959-01d3-475b-82f5-a02b8ce6601a", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110500, "uuid": "63765323-9e69-4e42-adc0-88d323ef483d", "value": "24576:svRst1d5R43L6c/rDKIcsjU6UsHMdrE6Jv3oqriYg1Ai4JlH9Qarh:jt1d5OBDvjxUsHcJv3j9lV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770110500, "uuid": "8a56d2e8-938c-4d15-9fc8-48ccc351cbed", "value": 1858048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110500, "uuid": "9f74818d-6201-43a6-9c40-4090fc24952b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0b8f8b5-00e1-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770110556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770110556, "uuid": "d892c7bf-199a-4e49-8d1f-397092420ac8", "comment": "Malware payload (Mirai)", "value": "f4f0010d9e2d895fa0b7260337638deb", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770110556, "uuid": "2b257cf4-68d6-47ea-80ac-c5cdc543d158", "comment": "Malware payload (Mirai)", "value": "2a829afb5ab199e55745dca07941de53a699aa1846d3b7657cc6a3327085add4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110556, "uuid": "8cd82edd-b630-48d4-98e5-c7d9df027f4f", "value": "T1A6148120FA0663B1CC731A34A79A2E5A6E7704559FEB26312D1F533CDE628509B31F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110556, "uuid": "c507e495-18fa-431c-8a1f-a9c88d787412", "value": "3072:BcHZcggFy1tJmajThwnKBDMOzsjJjL1lCRyUKG:BcYFAJ9/hjzsdjy1f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770110556, "uuid": "9fb689c1-a456-48b5-bfbb-5880f532b563", "value": 205416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110556, "uuid": "61b00f11-b209-4109-ad4e-81a1ec21ece1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30dc4a64-00e2-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770110690, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770110690, "uuid": "8c6f1d9c-fecb-4fea-aed7-cc3f6040ef6a", "comment": "Malware payload (Gafgyt)", "value": "6f47114dc7536b724cf983f3ce5d790b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770110690, "uuid": "b8a198ed-fd56-474f-ad4b-89de9b46ab57", "comment": "Malware payload (Gafgyt)", "value": "8134eb3a24a5a9caa15ca0f62a7d2bccd5ab9f45641d29f532b70827bb5854fb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110690, "uuid": "20298646-abf8-4c97-bb94-1b10420cbba9", "value": "T115B3AF87B2907ABEF0A49E3FC4135E26A6259F705583173D71BDF9906E3A3503292F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110690, "uuid": "1dc35e53-313a-4a3f-8932-366b1ceb708b", "value": "1536:toOxCg+uUGWkCqYUqwaJ1XqfXg5AcS5blaZeCtjHXNLdCS2T15OvhSkzb8rSx:t1xKlGWnqTUcXgZS5gZ7CSXhSiUSx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770110690, "uuid": "02e0ac10-7a50-4bbf-919c-fd6a478f9030", "value": 115116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770110690, "uuid": "b6c994e7-d86c-4509-aee4-e1f59c3dd62b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea9b3f94-00e2-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770111002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770111002, "uuid": "a3f6f22d-6b70-406f-8eeb-35c4acb04126", "comment": "Malware payload (Mirai)", "value": "fbc5234f091a3d619e324f6d36e3977b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770111002, "uuid": "27782b1c-e411-4a13-a426-b07d5a496d79", "comment": "Malware payload (Mirai)", "value": "478296f7e63ce407a06e18aa0e9ea7cfefbc9c78552aa37f893563ad1b86be1d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770111002, "uuid": "faaccce7-a72b-4e67-ba16-000caba0f1f8", "value": "T19B6312EADA35BC4FDECC9B39595022756088D6D1F3B3981035DBC48D9B1A22FD50CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770111002, "uuid": "3a8f0727-2839-4d56-b118-684eca4c000f", "value": "1536:9VUQ0TcrWCT3gcHB+cyepg1k/zJhw7nWAvnQGUgJViXZjbf4eNR:fp0T2WCbgc8bm/gCAv3JwpjbfRNR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770111002, "uuid": "ae80b1ba-b35a-42a4-9f28-24e0908307fc", "value": 70436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770111002, "uuid": "99d0b6b0-2f32-4b59-91f5-72de28b2e966", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eaf3a24f-00e9-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770114009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770114009, "uuid": "dcb1de05-6063-430b-abca-63923def265e", "comment": "Malware payload", "value": "b2985bf05a3a08983397f4a8fa5ccb3a", "object_relation": "md5", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false }, { "name": "Trojan/SilverFox.al", "colour": "#26c1c8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770114009, "uuid": "5ca7f8ee-df11-4500-8cff-8e0dbc8d6612", "comment": "Malware payload", "value": "d74e248c673284cabf506753e82637327a82434cf53b3ad53a855aba8656c4cd", "object_relation": "sha256", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false }, { "name": "Trojan/SilverFox.al", "colour": "#26c1c8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770114009, "uuid": "cfb94e82-0454-43f6-9113-57ca38def00a", "value": "T163D83377396DCFDA388828C9D484678AD04631A475AC9C5EF6CDBDF2020F96790B6D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770114009, "uuid": "7c707c74-5848-4e42-8714-ccf59cbaf0e5", "value": "6291456:9n1mkJ9Jn/wG5hLfdPod/9wTzampCdnCbqi+TCFoab3dIN/bwk+7:9n1HCG5hLFP6/qzJp2Uq3OFoaqwk+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770114009, "uuid": "63df2879-daef-41f1-bb66-597b33e60914", "value": 268912971, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770114009, "uuid": "5eb12cc9-3f14-4ddb-8ff1-79cdae143ce7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a683e01e-00f5-11f1-8b2a-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1770119048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770119048, "uuid": "92e32778-af27-4c18-b874-928342cb07aa", "comment": "Malware payload (AsyncRAT)", "value": "c706fcd6dd1f5d1668bf2714ccf2fc6f", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770119048, "uuid": "c99048c1-907e-4809-a3c8-bec53f5afb5a", "comment": "Malware payload (AsyncRAT)", "value": "6f1e6801962c3c0024675bcee4ecb89fb364c5008bae1a2b4e92be244194a717", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770119048, "uuid": "3a85c5b1-d8ac-4827-9b37-320142e2d3cf", "value": "T15805CE1613E86A6CF9BF9B3C5739401447F1F856CB36EA2E7D59809C5821F83CA963", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770119048, "uuid": "45be2ae0-bd0b-4abc-88be-56fea73f2716", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770119048, "uuid": "153fe193-6199-4e07-b106-dabc38bebbbb", "value": "12288:7BrwsmOpdnleO5RrGpv/ffL6cEwT8UTcYzc1usN9vjNBQ4mh:7Ost1d5R43L6c/rcwcYovjvK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770119048, "uuid": "07bb3189-d173-40f3-b72d-6521bbd6eeea", "value": 820736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770119048, "uuid": "5004e8bb-cd6d-49d0-a23e-eb03b987bf59", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16289159-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770119520, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770119520, "uuid": "d8b8626f-4266-4671-9460-2ded2fb8fb28", "comment": "Malware payload", "value": "aa5fde36cb0e26ac7973b0d983884490", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770119520, "uuid": "14952b62-bedb-40ae-afb4-405c5bf7bb03", "comment": "Malware payload", "value": "69ac6c1019c3f7133eb97a21b174ba9e40dea7c36a52170a5a8353d28bdffab0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770119520, "uuid": "a9643c4a-7b9c-455c-b5ab-a42aad2e5859", "value": "E703028632953F73D51148F4E7FCAFCA714ABD54EFAA142FA8113A15B07235D24C982A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770119520, "uuid": "ede01d1b-0d9f-4622-879f-4cc3147e888a", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTo:yYI0ARqw1qAEW67UIWi7M8gmo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770119520, "uuid": "7b0f76e2-0b65-4d90-9d76-ea95c0460d1f", "value": 40544, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21542779-00f8-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770120113, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770120113, "uuid": "480a9085-ff9d-42e1-89c1-72f3f18d7ba7", "comment": "Malware payload (Mirai)", "value": "950a686200c237c8a63719a014eccbfa", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770120113, "uuid": "35157767-9d78-44c4-b6ca-56213f16eb50", "comment": "Malware payload (Mirai)", "value": "e829fb7b39b54bedb0bc392689ae97e266d7dba40d758b4e57ffecb3ea7fbdb8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770120113, "uuid": "c1cf0147-23eb-4903-86fa-0a1ee64bd191", "value": "T1A5633BC9F401AE6CF94FDAFA40214A0DF511A25891430F3BAB6BFDD36C720A59E17D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770120113, "uuid": "74916bcb-5b38-4c29-b033-cf0ea4b376a5", "value": "1536:dM6MnehHm8Zft9BML0e4vY89RErmi/pDOp:dw0m8ZF9BMd+R2/94", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770120113, "uuid": "155ea511-7280-4143-8839-37e21131f59a", "value": 67476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770120113, "uuid": "c97b9098-3afe-4d35-88ad-d4b223418466", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "519ba472-00f8-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770120194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770120194, "uuid": "768054b2-efd4-427e-9197-77ac106012eb", "comment": "Malware payload (Mirai)", "value": "df3bcf8586a6eeb388b5b62543f7ff19", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770120194, "uuid": "891c0f6b-782a-4f05-ad7f-3d2828c3ebcd", "comment": "Malware payload (Mirai)", "value": "7575a248e59f4cc82d111b2098c64ee7cfe04f2b6c29f30972b40adef8c724ed", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770120194, "uuid": "201f31a1-d401-40d1-8757-607a23259697", "value": "T161538EBBC4A959E0C64481747528C9B90723E404A6A67FF68683CE53444BFFCFA167", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770120194, "uuid": "f053f77c-3f65-4468-973b-e053f2343e89", "value": "768:h//XTTI9Wa4kcaemdOLqOYex+cUZMJ9qYkRFoiKZol2CfmYFn79:h/fXWWa4I2+M2YkkiF2CfVF7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770120194, "uuid": "4938ab05-3e5d-4e6f-a6e9-8ea9a2aeb470", "value": 62968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770120194, "uuid": "3fcf5e9e-1dca-4c4a-87cc-da97d4079725", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfefd19d-00f8-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770120406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770120406, "uuid": "bac99873-650e-4b8f-b162-d1f49b67aeb1", "comment": "Malware payload (Mirai)", "value": "dcc9ddd330bcebfae58d2da3c6ffb757", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770120406, "uuid": "55ca83db-6a3b-4912-8349-1fa90151a9f8", "comment": "Malware payload (Mirai)", "value": "19ec1515e9e41398425f0d08bab481eb2247046820da8d0bc9a7ad5e8c9cb5aa", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770120406, "uuid": "762104c0-0dd8-474b-af54-7cd33c36a393", "value": "T143635B12E87D1E17C0E4A47E12B78B6AB3F5264E18A48BAD7E710F8EFF105D4B5062", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770120406, "uuid": "739bf16d-7c98-4831-ba2a-431d8c0607c1", "value": "1536:8ppNNR6n0CnnTbEU6ct6/ITGRpvZaAacYmCiF:oz60in7epvMmYmCm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770120406, "uuid": "b548968d-737a-44cd-801d-209bf69aa8be", "value": 71624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770120406, "uuid": "3ff2acd3-16ff-4734-a4f4-e05a1de1b1f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78f5d21b-006a-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770120630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770120630, "uuid": "ff01b799-6377-418e-987a-d6c78527c3c0", "comment": "Malware payload", "value": "9ba3d731ce5e23ce0b395d4cf7467e04", "object_relation": "md5", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770120630, "uuid": "20e4d6f6-5f8c-4dd4-830a-30af30a8600e", "comment": "Malware payload", "value": "1597f96869d6b8a94e112f1d6cc591e29636d622e71d70468b85a27a5dbed10f", "object_relation": "sha256", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770120630, "uuid": "970fe012-3321-407f-8c66-6133b17bfbf7", "value": "T132312CCA6B3FFCC1F9F9EB38374259C0CB57D5A089509101F558A4508D3844B5B207", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770120630, "uuid": "90ae4799-9f94-47cb-9bbd-86884d7e7f7f", "value": "24:92XhlNrRAzHHmCD6djrIIDmjbrTikE48NqrijizH+8cCxzys9MrSVgF2IT6NV2g:9yEzHGMajrISEvFQiD6CxtgF/Hg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770120630, "uuid": "de5e1642-fdb6-48fa-ad83-ee5766759a75", "value": 1594, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770120630, "uuid": "def9e7a4-bcb5-469b-a5af-531383692d34", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a30350b-00f7-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770121076, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770121076, "uuid": "043313ab-847c-4b36-9f48-c3fcc21164aa", "comment": "Malware payload", "value": "952d8dd6609e986d8888ce2cb35dce77", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770121076, "uuid": "580b70d1-e73e-41f1-b637-7393c7df21e0", "comment": "Malware payload", "value": "43fc2356086cd7da53c2c39a2e8b6fa0800229c071cc205b2b265a7960e14d4f", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770121076, "uuid": "878fe019-35a6-492c-b68e-c42bb9c7b33a", "value": "T15431EA2CFF8B2305C7820CB55BF65E41D4D79283426EB12B0A63060AD502E52C6787", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770121076, "uuid": "6855e2ee-2ebe-44be-babd-17f573b0faf6", "value": "24:9v4e2qHaqpQiMs7UPFphzEPwUWZsUWeF3BhzdbWs3dy/AKc54i8wIM4N/:9HaZzUWZDRxB2WdsAKFFL/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770121076, "uuid": "28232fbf-38ed-4b9a-902f-69d53292e071", "value": 1581, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770121076, "uuid": "d1df7273-614c-4a05-bae8-2ce470f62404", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d25f25f-00fa-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770121126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770121126, "uuid": "74fed92d-6a1a-4444-8e33-bafd1e682926", "comment": "Malware payload", "value": "1e889fbbd4ee3c0a5b611c5e61412356", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770121126, "uuid": "3f00a0d9-5628-487e-9a2e-a00a52110a61", "comment": "Malware payload", "value": "b487025149e110c495bdd66c494289b26311664ac4145718b9e7fb5033de6a2a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770121126, "uuid": "aa7e40f5-6b49-40e2-921e-3b71340ae0b8", "value": "T110340191B17597999EE513E2366F5F88FC53BE027CC29AF291D171124E6B380E8B30", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770121126, "uuid": "ffb8bd69-b108-4e81-b26e-1b77a4af498f", "value": "6144:c7fXhGUnIN6CTv2WXhAsEYnkdajhWlyB9p:cLU762JtEYk+h0A/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770121126, "uuid": "0cea7f7d-c33e-4575-93f6-39afb2f0fac4", "value": 247873, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770121126, "uuid": "4f3b0906-4af4-459c-9626-37989674d8f6", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5687a5bc-00f6-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770121237, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770121237, "uuid": "35437b74-7cc5-48b2-9dd9-9a45f43ff612", "comment": "Malware payload", "value": "c03fbc54d6c3318ec9fda8010b04e234", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770121237, "uuid": "00bd59bf-7047-439a-8597-88f4325f22e5", "comment": "Malware payload", "value": "019329ecc41228151fe3d933adc8872751591852f456803ac2009cce8632c8f8", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770121237, "uuid": "d4a9a870-dc3a-4be5-9623-8ff27f1dda75", "value": "T1ED31074BDB2D7416C205F7308CDA2C4993AC30B445A86A27C2108F08E97A291C7F23", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770121237, "uuid": "27b14b6b-ffc4-4209-ac1d-b6c9f5681289", "value": "48:917I7Oxq/di63MsO2fXzvw/ulczYLOdo511Bol+Jnfp:/I7OQ/4D2/zvw2tLOESls", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770121237, "uuid": "272edd5a-3d3b-4aee-a084-00dcf03d6367", "value": 1571, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770121237, "uuid": "7ee3c20a-8422-4421-bf4a-c71108271617", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55989f52-00d7-11f1-8b2a-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1770121388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770121388, "uuid": "2fbafa12-d46e-47f0-9108-cd62200052be", "comment": "Malware payload (RemcosRAT)", "value": "a1a32d741ce37d937efc08409da90c14", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770121388, "uuid": "c7ae8a58-bfd8-4c6a-b5f1-abea82b086a4", "comment": "Malware payload (RemcosRAT)", "value": "77b015bc671a8973f4860bd55352b39c681ecdad4ac48a7348c6bb6fee204898", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770121388, "uuid": "552bb40a-6b56-4be1-b80e-fdd0f6b9b46b", "value": "T1F6168D1EBA6D40E5C2BEC13C829BD90BEA7178514326D6CB65E48E190F67BF05B3E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770121388, "uuid": "b8f60195-d1bf-4418-bcd9-c457e369c376", "value": "d90e501a64bb3d4b1653a821eaaa3d82", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770121388, "uuid": "e35a5c4c-c655-4783-bd6b-e68e8ed20e8a", "value": "49152:aFoQ5hd8Mmbg6zz1JtiCECh7JpIoBOctvRDN80g9/GgFZXahtPtMtGKeCEdMd5Nx:aFs31fpAIvRDN80g9/GToWPhzb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770121388, "uuid": "48784c0e-2309-404f-8b12-fb64ff1f2f16", "value": 4102144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770121388, "uuid": "47094f77-5c93-4313-9454-42676124e2f4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa5b5b44-00fb-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770121632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770121632, "uuid": "c64d779f-cc01-4d13-84fe-e3addef4eb34", "comment": "Malware payload", "value": "edadd37a689581d5249bacc194410680", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770121632, "uuid": "b26cdc7e-1aa6-497b-b519-6f511a449324", "comment": "Malware payload", "value": "c90bf334201854b6e7dec1a900878ed4f07f530cb3155792f6228f6ba0f4d5cc", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770121632, "uuid": "26c43232-5a70-499b-b67c-cd318d6d60ea", "value": "T125E3F97F83F6313572038359F5A2A72896ADC233EB410ED2F9B29A9C8FC15A141771", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770121632, "uuid": "75d0a4bb-95f8-44bb-aab9-ea194f3ab448", "value": "768:1ZdapEbrTWlGRNjcXscJGcz74k/tHcTwAneJsfifRfiVIrePfHKIYW7uoFSnUh+z:dapAryl4k2w/JoIrU7QA4YVhJgb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770121632, "uuid": "68236106-f20a-486e-9b0b-e7c09e037193", "value": 147860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770121632, "uuid": "669c662b-145a-4924-b53d-b7644f0d334b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5c6e3f5-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770121855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770121855, "uuid": "a52e1c90-ca7b-45e7-bd90-4705fd498a29", "comment": "Malware payload", "value": "3b973286b5d06e8920aa3578a4941be1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770121855, "uuid": "49f9919e-779b-45f7-926d-94f2ab80afbb", "comment": "Malware payload", "value": "d4b125064e284d4586ccbe058f214c34ae4a973a3f276f7db1a1b1da0e9f97b6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770121855, "uuid": "1c51aa31-6ecc-4ae8-adfc-231a8ae158e5", "value": "9A33024523A62EB6C57548F1A3F8FF89B14A3EA49FF55C0A7C207658A43236C28C4C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770121855, "uuid": "0dcc20a9-7abd-402d-af1a-a387448a4477", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6EO:yYI0ARqw1qAEv7UIFM8oJorFquj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770121855, "uuid": "1fcf4013-d60a-4ee8-9d1e-6c039fd36826", "value": 53576, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d33c315-00fd-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Adware.FlyStudio)", "timestamp": 1770122281, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770122281, "uuid": "18e56ede-98b7-4278-b1d1-a8716dfa5c5e", "comment": "Malware payload (Adware.FlyStudio)", "value": "e4c32768dc934fed7c8d2ed0da676682", "object_relation": "md5", "Tag": [ { "name": "Adware.FlyStudio", "colour": "#fe6a19", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770122281, "uuid": "6dc91f9c-5daa-4f98-9cf0-28fa03daae5b", "comment": "Malware payload (Adware.FlyStudio)", "value": "7fdd1bcb14af6ce80360cab374402bdea16efc096f0763edabd30e9c8938d528", "object_relation": "sha256", "Tag": [ { "name": "Adware.FlyStudio", "colour": "#fe6a19", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770122281, "uuid": "a9371c7f-f200-4433-94d7-dcb2340340ea", "value": "T18BE68D23F211E5F2E456107052B763741A36B7302D27AA77EBA08EF41F717B1AA271", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770122281, "uuid": "dfddeb03-df72-4762-87bb-7318713fe304", "value": "fdba9d2510933502dd7bd33c4d3181f8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770122281, "uuid": "129916c7-4784-443f-9a91-3604f6965be9", "value": "196608:tdZqkcR4jAePbe8GhcBOzzflQ2EpZdaul48DueJO475/:tHzHVzef6OflQ2EpZdaw/aO/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770122281, "uuid": "bdd32b3c-eeb4-4027-a940-ca459087e17d", "value": 14409728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770122281, "uuid": "80f96e4c-5df4-496c-bb7b-ec861f923c4a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66c64e68-00fd-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770122377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770122377, "uuid": "dc069afb-7731-4045-a262-eae622a35eec", "comment": "Malware payload", "value": "ab5c5652185e7cadbb6d69582da2a80e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770122377, "uuid": "80e5f50b-1d0a-4209-a735-952ded0e4d69", "comment": "Malware payload", "value": "44a8e392ca48fbab110a36aa4c726f419441d45c96a616e47d1df1a7b54cbd9f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770122377, "uuid": "62c4ff04-4614-454f-8611-edac6c26c507", "value": "T1A78308327588582A210B028FD263336C70EFD8E2D611E5B6F7F622344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770122377, "uuid": "b3b40e63-721b-46a9-a365-96aebb7b7510", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tA5kDXpdyr2pbnrWWa5VN/:XEKltp9tAEX/yr2pbrWWEVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770122377, "uuid": "c7e8430e-2e04-47b8-8fda-82905dccfa78", "value": 85102, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770122377, "uuid": "9821d978-1277-405e-afd5-887a4735cbb1", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6734098a-00fd-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770122378, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770122378, "uuid": "88d032e7-35a4-4e7d-810d-2f8fd88f7ec6", "comment": "Malware payload (Mirai)", "value": "001f8cb4564f1ab59207392fd5608fb9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770122378, "uuid": "c70f1e2a-22c2-408e-8660-8a42d706a854", "comment": "Malware payload (Mirai)", "value": "3ae5b43af044c95ac0bdfd11fe1dfe5ef37d8d81b83e478995945d49e54ba029", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770122378, "uuid": "36b51115-f477-4439-9846-a28c8397c690", "value": "T180534BC8E5D3D9F9EC050A302272EF31EA77E13E316CDD9BD3D45A36A992602E5412", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770122378, "uuid": "99059028-75cf-402e-9dfb-dfac267fe3b3", "value": "1536:/kzOIng2n4sSBCu9WsVXLaZvuwTWFvevtDd3hkVD:8hngA4sMTdtLaVtWp+RR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770122378, "uuid": "0e263b61-7dc7-4c96-a33e-c7b5a7754f4d", "value": 62768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770122378, "uuid": "994f37b8-50e2-41fe-a142-353bb6e0499c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e16cbaa-00fe-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770122685, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770122685, "uuid": "bc8d336f-c1e1-4304-8b99-7016b51390f4", "comment": "Malware payload", "value": "765168dcb6cb7a294d1b1f586ea6117d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770122685, "uuid": "e7fda21b-704b-42c4-a801-926c99518ce4", "comment": "Malware payload", "value": "b737a36ef7d93c26d00a84d158e25f19bd821b60d75e093806a3303fbbd13045", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770122685, "uuid": "0f86fa3f-b91b-4051-9ffd-11269773dd10", "value": "T192E3F97F83F6313572038359F5A2A728966DC273EB410ED2F9B29A9C8FC11A141772", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770122685, "uuid": "b421a748-0fbb-4be6-8be7-931b17663e81", "value": "768:HZdapEbrcWlGRNjcXscJGcz74k/tHcTwAYKZsfifRf+VIrePfHKIYW7voFSnUh+V:fapArJl4k2w8ZUIrU71F4BihYT8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770122685, "uuid": "71ee99fe-3e2f-43ec-bbe3-9118922ec6aa", "value": 147745, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770122685, "uuid": "627ceb35-2d7f-48a2-b36c-f77dff82bae7", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af940cac-0041-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770122995, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770122995, "uuid": "2b6444c1-6f80-4389-bc43-0e77a941bd95", "comment": "Malware payload", "value": "2662d42a40d46ecc977862858ff629c9", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770122995, "uuid": "0672d631-3dd1-4579-8434-2b190d0dfa31", "comment": "Malware payload", "value": "2b2ddcdcfa49d53654a5feea0474c7f29a5ca6f0c5e6452a9216ace89f1a7b0d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770122995, "uuid": "14a1c03f-693c-4229-8fdd-932ec3ee3919", "value": "T167310A191C9DA26FC9534D3132C68288C8412D7FD0EFF5039D4A2C26692013CA970A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770122995, "uuid": "dc80eb1b-3c50-4113-be6b-fa0d07fd68d1", "value": "24:9BK2q2AfruEo/8uqsLuHsRw02tQhwalSrRdR8WQp56bFWFM/jjvT9kE4lct+6q:9ExHA8YuMmDtuk6WQf6bFdrjryE4aXq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770122995, "uuid": "ae26253b-f5f3-4baa-b566-8b5c54ec5492", "value": 1586, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770122995, "uuid": "1114c0dc-92c7-4b29-837f-df2021220602", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4747bdd-00ff-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770123393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770123393, "uuid": "39c0c20f-1a4b-4566-8ad0-69c35feae996", "comment": "Malware payload", "value": "d1c9540fefda9942d35e1d7c8dce950b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770123393, "uuid": "a8e47343-d523-4b17-b223-c725a7413271", "comment": "Malware payload", "value": "0b316ec4c64b02e49ea2084bb41eadde9c253d9abefe6aea19a53273e96fabc6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770123393, "uuid": "514a9adc-ba0a-4229-b6d9-4094a0a0ab0e", "value": "T165F31A62A7B4197A23BB43BCE455F78879688523D74D62E1F8FEC19C42C1BD224727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770123393, "uuid": "00527520-5b27-4682-a960-f5352f7ed95a", "value": "3072:EdrK2iu5mGuE/kDkank7evQ+/s4oxY+b3wyAtA+3CWPCWTn5bXZEtUioCkdGas0R:aru8GPLMWLasdlH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770123393, "uuid": "f1e46b8a-a067-495f-b8e5-91ee22b4e9d8", "value": 159238, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770123393, "uuid": "c393c8d1-cb14-46c1-be22-823b3081da13", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8486bc66-00f7-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770123923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770123923, "uuid": "a7f3447d-3ecc-4d30-a4f6-6d5b6860497c", "comment": "Malware payload", "value": "56417bb5f49472cec2f69c0d89b53d91", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770123923, "uuid": "4c47a2af-40e7-4fbc-ba37-eba3b294e06b", "comment": "Malware payload", "value": "08308621e2fa81e50d033c1ddbea58741e6969e4cbd689a6e87f3c51d5b81f2f", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770123923, "uuid": "09551b7a-4a01-464f-bdbb-f7cc9d6e0507", "value": "T18931B513D916BA22D754F27324E5701AB15531E70045E9889C0BA85AECA1BC3136B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770123923, "uuid": "6b646415-c712-442b-a440-4f9875d71bd3", "value": "24:9dezvw0sbu1W7kOB4J2R5KtHIkhAN1CALLjT4hHUX1N606TTdmMPmSXWZpD4nD3J:9gzY0vWd495i/fj0hHUXT606PFPmU/n1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770123923, "uuid": "749664b3-4645-4cbf-ad2a-65060faa8736", "value": 1578, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770123923, "uuid": "6143fcfc-c438-48bd-804d-80ecccb12828", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e029d068-0102-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770124728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770124728, "uuid": "e2e546c7-d540-4382-acd5-50baa546fe40", "comment": "Malware payload", "value": "7f1d063a765230e56c8c686634a5f4b0", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770124728, "uuid": "08817b38-e2a6-46d8-a6fa-2224e70d65c2", "comment": "Malware payload", "value": "99c8fb400ea0c78fcba725aa9e17431009d73756504dad57942d970b1bca8503", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770124728, "uuid": "44d9c626-b726-43a1-b775-58b8d3487536", "value": "T1C30506602800C027E84B61F675FA6FFE959E0E250780EDF755C42F9744B26E239729", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770124728, "uuid": "4d971e93-4279-4043-9cbb-7a319a5e3239", "value": "3dba82b9bf867c8cae19b16a3b46d075", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770124728, "uuid": "2ea7cb65-39fc-4a2d-96e7-240ab9b223c8", "value": "24576:2DWjjNayoV0y/X+7Mi42GFeflOWhmJBUvL9FQwUOhPJuovdbiIofETSshfxcTS5B:24MyocATDSot+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770124728, "uuid": "e9b57af6-c8bc-4b0c-b9a0-7d23fe40d915", "value": 808960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770124728, "uuid": "e0f8c843-dbd3-4be1-8969-a6c4e57671d6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a67eb0b7-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770125491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125491, "uuid": "b502d205-eb7b-4372-90db-31a0c86a731e", "comment": "Malware payload", "value": "d683c37b677d993e95095b39f66c32be", "object_relation": "md5", "Tag": [ { "name": "encrypt", "colour": "#e87d6c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125491, "uuid": "ad95407b-c701-49d0-a89b-f267c99607c4", "comment": "Malware payload", "value": "5b0df085cfa4102741f190cbd72e3b31cf42294410097c427c40a786a0de2db0", "object_relation": "sha256", "Tag": [ { "name": "encrypt", "colour": "#e87d6c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125491, "uuid": "882f31d2-baaa-412a-839f-e0d07e02b5ca", "value": "T14D97336794EA36674F65ACF2FC3C263373E51944B157B8AC3DDA81307F46C8A89906", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125491, "uuid": "de30283b-11d0-49c3-865b-79e9f04f047d", "value": "786432:JEpwca/EE/cc6szCoEhQ6S1xlwjFxuBsx+3uw3/lgq8TwlPeyOZujisFnhN2bVlx:TcwEE/cc6noEhQ3rwjFxu335qvAP/Oko", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770125491, "uuid": "f6a5786f-c605-4a72-9e8f-76522e287b79", "value": 39763138, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125491, "uuid": "4f8439f2-03e1-4901-bac1-5e776ccb3809", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6e720e8-0f08-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1770125592, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125592, "uuid": "4f8c72e9-b3a3-412a-ad9b-77cbe82d5826", "comment": "Malware payload (CoinMiner)", "value": "a20727b81b50a20483ba59ae65443dfe", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "i-frame", "colour": "#eaf934", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "sality", "colour": "#dbe48b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125592, "uuid": "440f7702-c39e-4b33-876e-7ec168d29a25", "comment": "Malware payload (CoinMiner)", "value": "af94ddf7c35b9d9f016a5a4b232b43e071d59c6beb1560ba76df20df7b49ca4c", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "i-frame", "colour": "#eaf934", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "sality", "colour": "#dbe48b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125592, "uuid": "cd02a4e1-5920-4169-96c4-a683c18408b2", "value": "T167563362F440E436E038203925F684A6B17DFD7347254A8B73A93A364D793D836BDB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125592, "uuid": "3239d89b-3af3-4505-8ed9-58a0f5014059", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125592, "uuid": "9e52f981-5782-45b1-9d83-6f17b1c9776d", "value": "98304:RLGSThOfTCiFBXmfFs+JMHpCVoR8oMEOJ6Ty3RvX+Y2naq8le+:YBfTCiUswVSLOJgyBG/aW+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770125592, "uuid": "9e296d57-7991-4c2f-81b5-354898588541", "value": 6271259, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125592, "uuid": "812dc495-9974-4572-b1ba-99ab0c493e15", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcfae515-3837-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1770125596, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125596, "uuid": "284ffc56-a21a-400a-bd37-4d2e6704aeea", "comment": "Malware payload", "value": "c3c561c20e48169f4906c6b0b135984b", "object_relation": "md5", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "info.zip", "colour": "#160766", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125596, "uuid": "7d2a341d-fb20-4ca3-a014-3277d7ca7b48", "comment": "Malware payload", "value": "b914abc696286a639a847d2e3a4a36ff682f30a87b08c4ffc61f2e0cf5e7ec5f", "object_relation": "sha256", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "info.zip", "colour": "#160766", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125596, "uuid": "7019f7af-bae0-4ca5-b3d1-694e20ddad3b", "value": "T1ABF53329C35BA51C444DD111B88E299A937D8D177E1E17314E43336CFE378AE3E8E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125596, "uuid": "f14c1874-390a-4abe-b25c-82d3ba518ab5", "value": "98304:SyrPvG3UNpYqQLpXhHHeanDebmPL+okjWa1luc:SyrPO3UDsdXp+z8+FWy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770125596, "uuid": "e6ef084d-a9e6-4455-9af5-c59acf9d57f8", "value": 3526945, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125596, "uuid": "7cd4e94b-332c-4a68-ba9d-e350f9a7ac8f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a69d41b0-e780-11ee-b38b-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1770125601, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125601, "uuid": "3eb9e745-216a-4dcf-9688-837ba486b59e", "comment": "Malware payload (CoinMiner)", "value": "ca1fb1ad30189110cc225620dc537368", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "sality", "colour": "#dbe48b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125601, "uuid": "5ec787eb-b3af-4af4-8ac4-3c76e857e59f", "comment": "Malware payload (CoinMiner)", "value": "3fde84a46aea58ba4ddb5fb0473fc756ff209ba96b1a63a2759d13b8adc01a69", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "sality", "colour": "#dbe48b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125601, "uuid": "f9e1f35a-59fa-4613-86e3-154e89a19992", "value": "T1C4563395F0806422F13D183615BA84F2B07CFCB343654A9F539E2A756D383D9263AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125601, "uuid": "9c460543-64d1-471e-9e14-1018cb80c65e", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125601, "uuid": "220bed5a-3cf6-41cc-a853-50ecaa274e17", "value": "98304:RLNSThOfTCiFBXmfFs+JhTpCVoR8oMEOJ6Ty3RvX+A0eVObApY:bBfTCiUsBVSLOJgyBG3KTp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770125601, "uuid": "c7ac8114-5278-4a3f-91f3-be7236ec4409", "value": 6227230, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125601, "uuid": "ae5806d8-715f-4b6f-824f-6c52525ea0b3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc85c4c1-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (CoinMiner)", "timestamp": 1770125614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125614, "uuid": "11e6a53b-4d81-47a3-98f9-7028fa259483", "comment": "Malware payload (CoinMiner)", "value": "9f3069e77d062da63b7ba5c1f35e9937", "object_relation": "md5", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125614, "uuid": "b21aa9c2-0c50-42b7-b687-8b8cb101c8a6", "comment": "Malware payload (CoinMiner)", "value": "ebcdf536447cba219a13756c00c97b4ed5fea47f2cbf2283ea86e80216d3822e", "object_relation": "sha256", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125614, "uuid": "c29269e1-1a01-448d-a782-88a91ab8ba71", "value": "BD563345F4809837F139153625F884B2B07DBC7297244BDBA39E2AA56E317D83339A4E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125614, "uuid": "9bc8b138-0c4f-444f-b28f-35a1ae6cd2dc", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125614, "uuid": "cbb45211-0060-4836-8288-e2eb4dc3729a", "value": "98304:RLJSThOfTCiFBXmfFs+JhEpCVoR8oMEOJ6Ty3RvX+UGD823FUuzmH:LBfTCiUs0VSLOJgyBGUA8Ch8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770125614, "uuid": "7ab5b938-c9ec-49b7-8ec8-83c4153c893f", "value": 6227160, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72887789-e514-11ee-b38b-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1770125633, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125633, "uuid": "a9bbe339-59f2-4d0b-9581-1e3451bc851f", "comment": "Malware payload (CoinMiner)", "value": "cbcb58ffe45c202c11bcf2070496aed6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "info.zip", "colour": "#160766", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125633, "uuid": "05b6dfa9-5690-4772-86bd-4275ec306196", "comment": "Malware payload (CoinMiner)", "value": "7126b9932dc0cdfe751340edfa7c4a14b69262eb1afd0530e6d1fdb2e25986dd", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "info.zip", "colour": "#160766", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125633, "uuid": "73b06758-b8c9-4e9f-aa5d-8e71a17428d5", "value": "T19DF53329C35BA51C444ED111B88E299A937D8D177E1E17314E43336CFE378AE3E8E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125633, "uuid": "5ed51b54-62b0-4975-b94d-dc1d77b95d88", "value": "98304:SyrPvG3UNpYqQLpXhHHeanDebmPL+okjWa1lu/:SyrPO3UDsdXp+z8+FWyE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770125633, "uuid": "cb10802a-17ea-443c-85cd-c2e9a73322b2", "value": 3528005, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125633, "uuid": "76e1f261-a1ea-4c1e-b164-f739a874aa94", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f1f2248-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1770125652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125652, "uuid": "5faaba71-c960-47e4-9cea-24950c4d5c10", "comment": "Malware payload (CoinMiner)", "value": "225479ea9643e5614687db9c9a785eab", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125652, "uuid": "f4efa91f-70b7-4234-b63d-8dccf0bbd03c", "comment": "Malware payload (CoinMiner)", "value": "533e54a9ab2b9f4a84fb631a16b8e8f2ab9f918a5b4f2bff4763d5d900201c91", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125652, "uuid": "e2c3d190-625b-4634-b1c7-10b1a8522734", "value": "T17B862296FF4350B4D8670678216AF3BE113EA40089374EF6E7C15BCBECA788225593", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125652, "uuid": "5a64e007-3e86-4e7b-89ff-eb1a24c4a37c", "value": "87e83bda436138fd7844ecd76decc70d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125652, "uuid": "245eea7d-48f8-4f15-be1f-3434334f9d94", "value": "24576:QWKqa4hnzP3w7L3rmZmpk7FSQFW2iJ+N07/TwYV1CdZdQ+4lT+iFgiGTtswAtdz:QSrwf3aZmpOFU2iQNIUc1LxGTtswgd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770125652, "uuid": "8d7134e2-cd5c-430b-9d37-57449b9e0130", "value": 8290304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125652, "uuid": "8347e839-0390-4133-aaeb-cea098ddc7e0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebbe57bd-0f08-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1770125855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125855, "uuid": "2cc23126-9c83-4ef9-ac05-73bb1a922c13", "comment": "Malware payload (CoinMiner)", "value": "a9d4007c9419a6e8d55805b8f8f52de0", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125855, "uuid": "48567b77-aa81-40b2-8938-65dd20ec78d7", "comment": "Malware payload (CoinMiner)", "value": "5d9fe2735d4399d98e6e6a792b1feb26d6f2d9a5d77944ecacb4b4837e5e5fca", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125855, "uuid": "db6665d5-af89-48d4-9b91-f43b4512e7c8", "value": "T13F563355F0405826F039107A34F988A2B07DFC724B7559CBB3A83E761E353E8267DA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125855, "uuid": "a3af1b73-ec65-455e-a452-cb095628c283", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125855, "uuid": "24d05730-e033-4bba-ab96-e8096cd16665", "value": "98304:RLVSThOfTCiFBXmfFs+JMHpCVoR8oMEOJ6Ty3RvX+jb5jC3ajz4F4VRc:HBfTCiUswVSLOJgyBGv5jGQW4VR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770125855, "uuid": "3375c475-4c87-43e6-81cb-eec610fe40cd", "value": 6271268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125855, "uuid": "a206660d-806e-4199-bf95-1b0d82774590", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9daed2bb-010c-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770128912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770128912, "uuid": "c34693e4-9a1e-4c68-8363-e6d0318c0686", "comment": "Malware payload", "value": "57ef9819f2287e8c86c78f5839671ab7", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770128912, "uuid": "2a224593-257e-4433-8e4d-5978cffb9e3b", "comment": "Malware payload", "value": "62ee834e1c631807daf45640e3a42b663b583247ad6dabefeeec0a16a5453027", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770128912, "uuid": "47ddd6ca-6df4-44b8-9fd1-28e108152729", "value": "T172F4E87069018069EC9F32F566EA2FFDA1AE0E105780EEF355C02DE704716E639B29", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770128912, "uuid": "3d133138-724f-4acd-8159-51fd1f5418ae", "value": "4bd229834078747e818e52da30b244a8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770128912, "uuid": "9303ce93-0b40-46b8-9934-5d35bc4ca4bc", "value": "12288:nJfEoJvQU+YDraejhTyIHZ1CJs73FSogC/f0W52XjEW8N8ZICi5OG0FAAVC7fLJQ:JfOhY7jhTyIHZ1CJs73FSogC/f0W52X9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770128912, "uuid": "499891c9-ac6e-4189-a036-9d3051c82d70", "value": 763392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770128912, "uuid": "9533b5fb-2c9e-4830-a3ae-cc4314f11b13", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "435c374a-0120-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770137350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770137350, "uuid": "bb65b1c1-3f1b-4ea1-89ca-a9bc7f0dd892", "comment": "Malware payload (Mirai)", "value": "9a37a17e038d9ce2ab8b5c77723caf6c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770137350, "uuid": "52acce46-7ebc-435b-af38-5dfcc6fcadd2", "comment": "Malware payload (Mirai)", "value": "78b40249bad0b543f9d1b70c7c8b19cf2242002dbcfa507464b8649db9dce14b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770137350, "uuid": "a0c44142-9580-4546-899d-a3175dc0ab56", "value": "T1FC263943F85191A9C1AED130C6669293BA717C981B3023D33B50FBB92F76BD46EB93", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770137350, "uuid": "0da07376-7261-46c6-8b69-7fac8ddd8926", "value": "49152:QQMPrb/TfvO90dL3BmAFd4A64nsfJLiPLbd9MDnwZZZ/6bhDubDf6b2NlJX72f4y:WEG/xibOx7Z/Yf7O94EvLv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770137350, "uuid": "4246d33e-ef7f-48ea-a7e3-00087c8bb0f1", "value": 4640768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770137350, "uuid": "2177e67a-453a-42ed-bf6a-06013a0ddf3e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43676bed-0120-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770137350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770137350, "uuid": "5626bea4-21aa-4112-b602-927de1fb5929", "comment": "Malware payload (Mirai)", "value": "2314c3ba76829545bc50c4e97e8a2b41", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770137350, "uuid": "ad382ee3-6878-4164-89c1-d12bc61e24b2", "comment": "Malware payload (Mirai)", "value": "f17560ad18d86bd84ce645ca24e248109800ae18bae9781870cf319300c26806", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770137350, "uuid": "3e1ddcfd-43da-4b46-bdb5-7255e06b0336", "value": "T1FE261A57B8918683C4E4367AACBEC1C433635EB99B9722576D04FE3D3ABE2990D353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770137350, "uuid": "ac0919e8-df1e-4f10-845a-73bdd220541a", "value": "49152:OdbPwECXvzRG6AdgKjxpmVPdvtEmxxMAz0U1F1:gbPcvVG6AjxQx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770137350, "uuid": "987e8038-ff86-4a42-b1c3-644688d8a913", "value": 4521984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770137350, "uuid": "7fac402b-14b1-473d-a1e5-30c0e4b314d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4369610f-0120-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770137350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770137350, "uuid": "df1a3183-a033-4544-ad3f-ea5ea3eb6c38", "comment": "Malware payload (Mirai)", "value": "0e48b98fe3085344c63667962ae32c66", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770137350, "uuid": "5d084dca-7547-46fc-889c-464439b76214", "comment": "Malware payload (Mirai)", "value": "e0f1f24ab8bbb2d4518ae08b4441cb03760b684bb71825f07a3f513fd880d3e5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770137350, "uuid": "16f829de-c00b-418f-892d-c6f4ea0b9dac", "value": "T150165B65BD5EE963E6C877307B7582C4323EBC489F819223A604BBAE5DF275C8F121", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770137350, "uuid": "25805af8-e658-46d8-aa06-b565037685f0", "value": "49152:rW1cQB937QDY6Q/kHgJUddtG5E6N6PIoOFOglKRz9B1:QcQB937QDY6Q/kHgU8E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770137350, "uuid": "bd34c54b-8789-40bf-8c7d-23f14971c1d2", "value": 4390912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770137350, "uuid": "147ec48f-d793-4c32-99e6-92363c3f1871", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4495cf32-0120-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770137352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770137352, "uuid": "2798a227-27c1-404b-975b-5ad1f4d19d2a", "comment": "Malware payload", "value": "c473cfd22d5dc9c1e4de3d9efdeeacf2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770137352, "uuid": "9716660d-8e48-4578-97d2-e0bebc9c993a", "comment": "Malware payload", "value": "c04bf61eb9338cb89de37531416b0de30cfd62052cd962e88a3a75c3740067ac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770137352, "uuid": "e2bffc2e-e19a-4be7-86b3-8f6fcd140c67", "value": "T1B2564A03ED9555E9C1EAE2308A639252BB717C485B3123D36B60F7382F76BD06EB97", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770137352, "uuid": "76beb817-c94f-4a5e-811d-d202b1be13a5", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770137352, "uuid": "6e2fa0c6-5a33-4d95-b038-d620894c2072", "value": "49152:1ePeVBA7NfddS67AB3zxjTZYdzIcqD4p7mRsUg9sRX/+y7TTeERcX7SscKxvcruR:1TwU3gz6D4dmSKvMgnkUnGE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770137352, "uuid": "7d139427-1239-4431-a51f-06039fc0e638", "value": 5998080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770137352, "uuid": "e4a5097d-ae74-4cfa-af53-c219482d6af6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6006ad65-0122-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770138257, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138257, "uuid": "61439955-7cad-4833-a806-73622192607b", "comment": "Malware payload", "value": "fdefe73b31278a06d313db1add9a8094", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138257, "uuid": "d0424a55-9d6d-43ad-b9d7-7db6dda94201", "comment": "Malware payload", "value": "0e6816b722a51f7c76e39ad175adcae7dc410b9a35969fba4e12dc1c5d6d41bd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138257, "uuid": "968457bd-9a88-41f0-b8a3-5ee91847d247", "value": "T1CDF58C57FCA108AAC4AA93318AA251927B71FC491F3123D72F64B3382F72BD46D797", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138257, "uuid": "aee8465e-2e78-47cd-b35a-4f2657e56c66", "value": "49152:5mml296Fsr2htUp7nFyAGkOoDDoK5/kMQZv7v6ELOuJ7hZJmB1yL7yZEfWlN:5/66WHzNvH5Cv7BLOuJ7hHm8QN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770138257, "uuid": "9b5bdc48-9676-4211-962f-7f4076f94275", "value": 3361829, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138257, "uuid": "a3fa8117-9b9c-4ef8-8cbf-7b2cf9549b48", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "350c384c-0123-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770138615, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138615, "uuid": "ded7fbc0-0e9d-4d08-94fd-8dcd5cc929eb", "comment": "Malware payload (Mirai)", "value": "aa3c7d3b3988f115946eb308b8f101e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138615, "uuid": "5637b8ba-07f9-4029-afde-9362d0b1b8c4", "comment": "Malware payload (Mirai)", "value": "57f572f14b487d7af262492e37545a41b6a4c9845dae8a7cd6365450add85fc9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138615, "uuid": "b878f2fd-1a8c-4c86-befb-1bee86c3b6b1", "value": "T1E383A61E6E219FBDFA68C23047B74A21979C33D627E1D685D29CD6001E7034E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138615, "uuid": "c62a21ab-396c-4387-ac7d-14d8be9deb8b", "value": "1536:rYM+VffRbU4hnVviHdy9BeBcwCcTgee8ns5RSld641Ri:rD+fpbU4hVedEeawz2zEd64y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770138615, "uuid": "ec776df8-e4df-479a-ac51-f4928085c1d1", "value": 85188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138615, "uuid": "d96784c5-454a-45f5-aa67-86bd387fa346", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "351401b2-0123-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770138615, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138615, "uuid": "5b7c7d29-07ee-4e16-b32c-c1c183f6b43e", "comment": "Malware payload (Mirai)", "value": "578825cde2d184571732d801cb4e41f8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138615, "uuid": "04ecff26-6afc-41c6-8173-fa2825d32a4e", "comment": "Malware payload (Mirai)", "value": "b682eb94328121e1e366fe1dcbd31ffb236f6f5ed2c30cec688b5fdfb7a0693b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138615, "uuid": "1d7de61a-056d-4f68-b4e5-894da5f3f61d", "value": "T115532955FC819712C6D012BBFB6E428D372A53A8D2EF32079E266F1137C791B0E6B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138615, "uuid": "c4d66d5c-0566-4fbe-bdd4-271a8102364b", "value": "1536:h2ohZei810I0mbqiLolgutb8SC6pmIwgYO6Z0uA:h2Ia3l2MOgutbX7woxuA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770138615, "uuid": "024252ba-1c6c-4f78-82a5-647ce92be8f9", "value": 63600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138615, "uuid": "83fff355-7ef7-43c2-b414-9e5e209c8b3e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39149130-0123-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770138621, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138621, "uuid": "ad22ef69-34d4-47b5-b842-181f54bb8d9d", "comment": "Malware payload (Mirai)", "value": "514812e0f0a5994858719c18101a8cda", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138621, "uuid": "5a3e1ba3-7d44-452b-afa6-c889706d1818", "comment": "Malware payload (Mirai)", "value": "2b5e29a48d27e3a85172e62d36daf4c122494b31551a9cfd030ee3181a90b053", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138621, "uuid": "61871641-db74-4d09-9f61-6fb8fadfda43", "value": "T123E31A56E7408B13C0D62B76B6EF424533239B6493EB73059928BFF43F8669E0E635", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138621, "uuid": "7d750931-c4cf-4c57-b863-0bfe40142335", "value": "3072:Uo9zhzsmB4oIavKxl92R1b5nnUw5iq0mB+S5+M/91P/MQ1GHLN:UoZh/IavKxlURfnUwhz+SgM/9NMQEH5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770138621, "uuid": "5a17422f-3dab-42b4-8af1-fcfd93f57353", "value": 149192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138621, "uuid": "616de23d-7321-4488-b85b-380f2a2a9c12", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39180351-0123-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770138621, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138621, "uuid": "5a5deafd-586c-41bb-baf4-2cf172bbb7d9", "comment": "Malware payload (Mirai)", "value": "9b0ca8a165e4e287e67b2136626de594", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138621, "uuid": "2df47953-33fe-4e56-9658-9a696c8cefc1", "comment": "Malware payload (Mirai)", "value": "f0b84abf1bb1452f759f679f2316aed68bf795a58d3f44fc01888d7778164501", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138621, "uuid": "a05ce99b-c8f8-4c8e-b862-7dcaf8140933", "value": "T1A5632B51B9819613C6D012BBFB2E42CD372A53A8D1EF33079E26AF2137C795B0E6B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138621, "uuid": "b32098ad-a7d8-4b31-b991-12aac9f63efa", "value": "1536:mTv0UeBXgHniKhq5kJEwOmzFXZCaWfvGu:mTCQH1q5kJv5IGu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770138621, "uuid": "f9d36a0a-349e-4217-bbf4-b5dc0b799f6a", "value": 67164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138621, "uuid": "72fb1119-6b31-4aae-8374-7fcc1330ec73", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39234058-0123-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770138621, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138621, "uuid": "6ab33ad9-cd8f-4ef1-ae47-697e5765e668", "comment": "Malware payload (Mirai)", "value": "38632f659968a79a2a7b53d0f4414e1c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138621, "uuid": "28735b47-0168-4d24-92a1-07ccf9934d90", "comment": "Malware payload (Mirai)", "value": "ab4f429b4cd899984ddc5aa0f138b08d8bd2ac6ddde9e7793a019e6041dc7132", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138621, "uuid": "f52936fc-292c-47fb-9d91-9a3cd4ee8259", "value": "T160732A5AB8819B11D5C116BEFA1E118E3323477CE3DE73129E24AF20778796B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138621, "uuid": "8d228386-cc56-4dc5-8cb9-dea852c336d5", "value": "1536:SDnE7mi6DajEVRLD85PQObqaKK2NQbMui/1GnJcenm7de5YYNz:v7Z6D4+D/ObqaK71GnJcenmZeauz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770138621, "uuid": "c3843850-854a-4634-853b-9577bded128a", "value": 75348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138621, "uuid": "c49436c7-a738-4231-b607-02f426d3e952", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f814924-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (CoinMiner)", "timestamp": 1770138976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138976, "uuid": "c26d7632-337e-4328-bc43-672ec0864ca7", "comment": "Malware payload (CoinMiner)", "value": "aba2d86ed17f587eb6d57e6c75f64f05", "object_relation": "md5", "Tag": [ { "name": "alfa_team_webshell", "colour": "#701e95", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "expiro", "colour": "#f40246", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138976, "uuid": "00f16ae8-0e0f-4ab1-96b3-455aaabde688", "comment": "Malware payload (CoinMiner)", "value": "807126cbae47c03c99590d081b82d5761e0b9c57a92736fc8516cf41bc564a7d", "object_relation": "sha256", "Tag": [ { "name": "alfa_team_webshell", "colour": "#701e95", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "expiro", "colour": "#f40246", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138976, "uuid": "d299a82c-9e4c-4056-a04d-41fbb1be90ba", "value": "F5752296FF4350B4D8670278216AF3BE113EA40089374EF6E7C15BCBECA7882255935B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138976, "uuid": "4c98ceb0-54a8-4370-b7fc-3acccb8ecc2c", "value": "87e83bda436138fd7844ecd76decc70d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138976, "uuid": "af1f3a0e-3d68-438e-a6d6-9157df4f1c6b", "value": "24576:pWKqa4hnzP3w7L3rmZmpk7FSQFW2iJ+N07/TwYV1CdZdQ+4lT+iFgiGTtswAtdz:pSrwf3aZmpOFU2iQNIUc1LxGTtswgd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770138976, "uuid": "b50e641e-b2d0-49c8-8bcb-3d8e7b115fa1", "value": 1578496, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bfbcfa2-0129-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770141230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770141230, "uuid": "ac67c539-5cab-4cae-ab7d-50769e596224", "comment": "Malware payload", "value": "efb466c89129bbb03d07a78ded356e95", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770141230, "uuid": "30807e68-2c71-4c0d-bb8d-380c60e88d22", "comment": "Malware payload", "value": "576567c30a8df161eb79cf2a68d5f3a4f90267af337cbd3a5e06f2bb6b0a4400", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770141230, "uuid": "c257930d-7d7d-48c5-8ac2-4f66b2751c65", "value": "T1D5310A94AA831003CFD6E1763CF18801CBF429C4694E1BBD0B55E91A7FD5B62AD132", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770141230, "uuid": "295cafbf-b839-4ec2-a994-07b6df51eb17", "value": "48:9y1rpPE1hhkItZy9Q22e3tTKwlyeHwbZNbzXLwYn:wbE1cIbUQYKwlyeQbZNbz8Yn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770141230, "uuid": "9bb640cc-ed8f-487e-b7d1-9267d5827d5f", "value": 1584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770141230, "uuid": "dc159c26-bce8-4cb9-85a3-776718f358cd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4a3f973-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (CoinMiner)", "timestamp": 1770141331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770141331, "uuid": "cbcba64e-33a9-4b7c-91df-937d27157261", "comment": "Malware payload (CoinMiner)", "value": "8604e0f263922501f749cfca447b041a", "object_relation": "md5", "Tag": [ { "name": "Banload", "colour": "#b535ce", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "info.zip", "colour": "#160766", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770141331, "uuid": "28424ce8-1a54-4587-94d5-1448f431e8cd", "comment": "Malware payload (CoinMiner)", "value": "52ec3ba075a507e62bb6e3272fb13b30a8ddc0f62c4ea194311d558b338eb5ed", "object_relation": "sha256", "Tag": [ { "name": "Banload", "colour": "#b535ce", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "info.zip", "colour": "#160766", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770141331, "uuid": "af286c15-c119-4066-ae75-9bd418e7009e", "value": "EC114672D984B832E5C532B534078D428615A2C362B7D556C0EBD65A0D2B6436F83995", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770141331, "uuid": "928555df-35ad-4ae1-9d88-98ef3b79f67f", "value": "24:91mVy6UwvwrBg4o+xu9f2vyHwKmKuuuD5hioildx8R:91mOOwrBg8gUydU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770141331, "uuid": "a5922374-49f0-4bbb-82bd-e10786967e97", "value": 1068, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b30a58a3-0129-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Adware.Neoreklami)", "timestamp": 1770141403, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770141403, "uuid": "58d570f4-c3cd-4f67-b4eb-643d3a741513", "comment": "Malware payload (Adware.Neoreklami)", "value": "79705328a59dd55c88591a3708ad4729", "object_relation": "md5", "Tag": [ { "name": "Adware.Neoreklami", "colour": "#29eb4e", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770141403, "uuid": "b2836291-f009-4339-a23c-ed1e6cf79c71", "comment": "Malware payload (Adware.Neoreklami)", "value": "28dbdf0f8648214122f72fd83734ea4203c662d3ad3da4a93519f3c645423af0", "object_relation": "sha256", "Tag": [ { "name": "Adware.Neoreklami", "colour": "#29eb4e", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770141403, "uuid": "483fa961-fe10-411f-9f0d-be9300ec3bb4", "value": "T1FC763395FBBC05B9E29064B2EC677A64FAB9D1914630C523725A870C0CBD4D1CA23B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770141403, "uuid": "41458149-e217-4e5c-86ba-ab7c246f0c4d", "value": "3786a4cf8bfee8b4821db03449141df4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770141403, "uuid": "b8fb4339-7934-458f-a5c7-08bb0b9cafd8", "value": "196608:P1OXos2X4JPtgF24MbYrmABb8X4qS9lYamvAFvaPx2K5:tOYNGPtgF24YYrP44/9lOvAcx55", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770141403, "uuid": "6d8cca07-ed63-4c08-8075-2c0305c20856", "value": 7508208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770141403, "uuid": "ea98f93f-1938-476d-9ddb-712c708287d2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32414d82-012b-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770142046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142046, "uuid": "9e0146fc-e642-4430-b2c3-5eb78fe8b5ff", "comment": "Malware payload", "value": "86bcedac3ca58d6375c252303e0cfdea", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142046, "uuid": "95ec567f-f120-463d-a3c7-61d59e9b7762", "comment": "Malware payload", "value": "0d87038a380747f663d3b03482d1882a1b81fc19931d27d003a8cd474b7faaae", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770142046, "uuid": "7584d09e-a3ba-4a77-96cd-d48ca4e65c5b", "value": "T127F4F87069018069EC9F32F566EA2FFDA1AE0E105780EEF355C02DEB04716E639729", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770142046, "uuid": "a00b3bc8-9d1a-4a69-bbd0-25dfb00afe8a", "value": "4bd229834078747e818e52da30b244a8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770142046, "uuid": "76adfe48-294f-4621-a631-37103adeaf15", "value": "12288:i3LodPzLStxnVzKYpuKFP+L7g/0ZcK+kxYGy0R+P0W8vD+WyiKk9EIvPK7YLKipN:i3uLQxxKYpuKFP+L7g/0ZcK+kxYGy0R/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770142046, "uuid": "aa4e5cf4-9ceb-4181-8e02-01935d6ef46e", "value": 763904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770142046, "uuid": "9d870c07-1281-4995-90fb-dfb01376b9c9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8484936f-012b-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770142184, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142184, "uuid": "cf50f159-e8f5-42bd-ae6b-2d83880e93e8", "comment": "Malware payload (Mirai)", "value": "ed7ce1d197029903990b8a130febe2fd", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142184, "uuid": "be646198-df43-43ba-9446-8c9c38cae8d5", "comment": "Malware payload (Mirai)", "value": "0029fe67bf75b12aa1497f5302e59294502f57f59dd47d0c7d8e9a376794adf5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770142184, "uuid": "d3c5ae12-dc34-42dc-98cf-5c040efa2814", "value": "T163533A8AE68BD5F0CD4A09B0157FFB3DC636A8303274CEA7D7C4B957A9E3642A0511", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770142184, "uuid": "db075830-d6b7-4fd8-b18b-96791fcc311d", "value": "768:PBwi1YBbMR0QfmKURPsyPwNXxIKBsCt/+wQugsSHwG/d/tSyMgfFkIb1PcLtupzD:IWyQf4PCXxKuytS+fduLMpn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770142184, "uuid": "bd82adc7-9320-4101-9df3-5db3a82c5079", "value": 63860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770142184, "uuid": "88fc79c5-3da0-428b-babc-4c4fcf2221bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d21fc66-e67d-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770142311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142311, "uuid": "d7646510-558f-433a-81c9-ed2c95640407", "comment": "Malware payload (Mirai)", "value": "36e9e1ceac7772aed4aee2518f058e5c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142311, "uuid": "0b3869b9-ad31-42a9-83bb-732d116789e4", "comment": "Malware payload (Mirai)", "value": "eb3418495b5dfb16051c2de9bb8b5bc66e9b41e1d3d99e3ea99ff6a6d6259331", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770142311, "uuid": "72c28f7f-cc08-46d7-9354-90643ca26fb1", "value": "T1AE13E1BEB8ECA64AC75F0C7DA26B0338D3C4B091661C5F885B018849DB1D53FF945D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770142311, "uuid": "f251e53d-0bda-4c62-b33d-e7491df18221", "value": "768:RPSyMfQvE4kNWFJ8m2JU1nQeQVZZGA3ztlsuBJFA1zCMZHRG1WBc:RKfQM4qg1nJQ/ZGizkuJMZHYgc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770142311, "uuid": "d178d3a6-8129-4465-8175-5504d2c4bb48", "value": 45164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770142311, "uuid": "e6f6a33b-a216-4352-9bb0-b37928d2df32", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ded6f61d-012d-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770143194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143194, "uuid": "1d462459-9746-40d5-883f-4a3268234f31", "comment": "Malware payload", "value": "cdf5f8a70696176c56698104d648fa6f", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143194, "uuid": "f2c6d772-100d-4df7-a5d2-4820ca7a64c9", "comment": "Malware payload", "value": "204182eebc83b8b2c8dd72584b2c2cc3d991092f665db4a71e447fe95f50905b", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143194, "uuid": "403d1467-3a3d-410e-840d-fdaced329693", "value": "T1FF05F86068018027EA7B52F5A3FA2FEE919E1F540780EDF751C02ED754722E23572A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143194, "uuid": "79c2458f-309b-47cc-ac14-a02e4f81399c", "value": "3dba82b9bf867c8cae19b16a3b46d075", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143194, "uuid": "fd38219f-8906-49db-b6ad-70c8471f0e64", "value": "24576:RqN+1Ce3FswKlLQoKp6AQ0++R+kyniJRLa5P+k9BawDKJ3E0iMhfaYCw27evTy:RqNiFCw2GTy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770143194, "uuid": "d788cbe9-1440-4131-941a-c26fc9fdfc15", "value": 808448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143194, "uuid": "f6f1c5d5-ce9d-4607-9437-b49b7626924d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9e7c5d5-012d-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770143240, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143240, "uuid": "301d71cf-562e-4c3a-bd49-b5e3502d22c9", "comment": "Malware payload", "value": "d2fd4011982f03ba941dba132df36174", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143240, "uuid": "9d4cd06c-46f6-4804-9e9f-7348f4283003", "comment": "Malware payload", "value": "3037aada46566ff175d353b4322e6f9c07462e935ffb1232f2766055372a50c3", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143240, "uuid": "b78e0449-1bbf-45f5-a76a-2f7cf54c9eb5", "value": "T1C7B0489B3684CAA6863C996C3221B42680FA88791BAE8B844B5800C6844752C79CA6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143240, "uuid": "644c49fa-3479-46c5-b41f-d501397d8977", "value": "3:L6F8iuqDjWl0+iu+BzS/RIUiuzypiuIMCnN:L6FGqXk0Q+uIueZxCnN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770143240, "uuid": "04c3386d-7095-47c3-8088-47cd39935ff8", "value": 120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143240, "uuid": "4d3e2087-9574-4490-9060-82ad51ceac9a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fa7ce9e-0807-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1770143713, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143713, "uuid": "e05d2f53-26db-4f93-bac1-9960134198ad", "comment": "Malware payload", "value": "df64a5c787f34c5b38c8103a67e3d97c", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143713, "uuid": "b87e75bb-da94-4a89-aa96-c8d8b2b6f538", "comment": "Malware payload", "value": "6f1bbcaa6efc41ee257919a85acc9ea5b1f82c8def103e39629e0b5161800ccc", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143713, "uuid": "d62eeacc-f82b-49d3-8ebf-683032cba6f7", "value": "T11D356D56F9808EA2C5D8177BB75DC35833234B78D7DEB102CD08672477AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143713, "uuid": "2162a7e3-d15a-4869-ae9d-4fcec5a8735f", "value": "12288:sQFoCapOujNJ7h8SYIhU1wwy7zh36bV7CIBolbVtE7ZdXjboyjBNY3v9fQbLv:sQFbJi5Pa/CbmzotVqv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770143713, "uuid": "98c73988-e6c8-439d-a804-6767a21368b3", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143713, "uuid": "77f91bb6-70b3-4f38-9c11-292c7e0d4e15", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143713, "uuid": "b6e394be-4a76-47ab-964f-b470b378008a", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1770143718, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143718, "uuid": "58238232-4bcf-48f6-a5a0-fbcee660d55d", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143718, "uuid": "10bc23a1-a9b2-403d-97b6-209b6707c1a1", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143718, "uuid": "3e9d0b0b-2917-4269-aea6-27e806a08876", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143718, "uuid": "46ae9e83-4d4b-4325-8394-a3fe28fd2ab6", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770143718, "uuid": "ed45d0dc-95cb-4aa3-b658-8bebe6b98fac", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143718, "uuid": "f5935e6b-758e-4551-81ff-a975815b5564", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143718, "uuid": "e2aa6f86-3df9-4630-9c92-670168267e59", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1770143786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143786, "uuid": "f6fbd058-0da4-4209-9d73-2011c08095a3", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143786, "uuid": "5b25a922-70d8-4850-b979-e1d2ea30929d", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143786, "uuid": "931d0dee-b389-43a2-ac85-1a41a8930668", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143786, "uuid": "327937d8-1f98-4e5e-8f13-a99d91ac35ad", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770143786, "uuid": "4fa7d56f-c6cb-4b97-9299-4d5e12cf684a", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6d0b5db-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1770143789, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143789, "uuid": "0fd90a51-ff76-4d01-a4d7-c9fad7e9de3e", "comment": "Malware payload (Hajime)", "value": "5377e8f2ebdb280216c37a6195da9d6c", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143789, "uuid": "ea155bf2-8a15-4ef9-817f-4e4284b04c6e", "comment": "Malware payload (Hajime)", "value": "020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143789, "uuid": "dd893b55-1f98-47df-8f96-e2e0cfe9c020", "value": "21831229135414E5D62681F1D3FD1B84AE981FA9CEE2EC147C12BC89EE333AD3CD2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143789, "uuid": "fd17b5e9-767d-458c-b569-994e4bfd42c9", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uBNu:yYI0ARqw1qAEv7UIFM8oJorFquyjkRks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770143789, "uuid": "6265ebc2-9ecd-4c3c-973b-bb964f7ded33", "value": 85232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97260a33-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1770143792, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143792, "uuid": "42920da5-5d29-4ce0-bb8f-47454c5b651f", "comment": "Malware payload (Hajime)", "value": "b8ed2cb3e9fedec5b164ce84ad5a08d0", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hjamie", "colour": "#0c8ce8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "rdgn", "colour": "#cb07b3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143792, "uuid": "98a85eab-a907-48f8-a8da-63686157d068", "comment": "Malware payload (Hajime)", "value": "d5601202dff3017db238145ff21857415f663031aca9b3d534bec8991b12179a", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hjamie", "colour": "#0c8ce8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "rdgn", "colour": "#cb07b3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143792, "uuid": "01f43cba-dede-425e-99fb-9b4f8aba31d7", "value": "468312CFA4598B66EC7ACDF809DB59044D46621E738B75EF530CD59C2038B862C8E92F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143792, "uuid": "d88a6c00-9bbb-4ef5-b4b3-4ad341ae12ee", "value": "1536:m3LqE6rUQWzVQR7iAGEcUT5PIi7pLqBNs4LOjcwf4nB6XuzGNy+iSc7tNUZM:mOE6PWo1T5bz4LVMXuzVNScWM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770143792, "uuid": "3030e5ce-e796-4b4f-97b7-0fb29450990c", "value": 85128, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46e319bf-012f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770143798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143798, "uuid": "8f258940-34f6-47d8-932c-8b453049acd5", "comment": "Malware payload (Mirai)", "value": "827ae518cf992527ac374ba257871833", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143798, "uuid": "0645b6f7-45c9-4b9d-a166-8059f8079d7d", "comment": "Malware payload (Mirai)", "value": "58c9220ae7d6e5e39d2fe77cb2a3d9df5929572ba2f8cab82e2b0e2f2ab5b13f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143798, "uuid": "e5e3311d-6b4d-4926-92c9-18fb3bf89335", "value": "T18B631AC5F98B81F6C90B893051A7F23FCB31D9B951708A6DEF4AAF35DB3390192161", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143798, "uuid": "a03e15a8-4b60-4e3f-8cba-6a2933cfc877", "value": "1536:GzhWSucr4I51a8RzbiPs1begAgbPnZFjT:shW+L5A8ZbiP0egBPnH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770143798, "uuid": "41a7a508-7509-48b8-8356-654a8ac223c5", "value": 66864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143798, "uuid": "42ec646e-9d54-47db-8051-99ca9d998a96", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5893f23d-012f-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770143828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143828, "uuid": "e82c16e8-b899-4ced-86d0-9294bedb1d33", "comment": "Malware payload", "value": "d613429e49de12777149bb25a24c941f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143828, "uuid": "1542e40e-423c-4e07-9ba3-402d54d947c2", "comment": "Malware payload", "value": "508efc3adfce6991257b7fbb06bd6bee691d50265a3676f180f6d6a779696df5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143828, "uuid": "60771bab-6fb3-45b4-8ac2-69d900186a00", "value": "T12F34F16DC4592EC8A45DAF9D5337092E171DCA0CFBB7E546A2D42132AD2FB10BBCB1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143828, "uuid": "0f57b186-23c7-47ae-8ae9-9692bb67a9c3", "value": "6144:cWxZrKSZz0sOyRR8XDbbiAY7iXhIaCvxhkoGvDi:cWTKSx06yXDb2AYjIjm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770143828, "uuid": "2896ef92-02b2-4b98-8d79-7f4f77efc665", "value": 247892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143828, "uuid": "e491d2ed-957e-429d-8c02-4e2e6a0f0dfc", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "885a67e1-012f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770143908, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143908, "uuid": "cb51bfd8-9c0d-4cbe-b35c-9744a2cb2023", "comment": "Malware payload (Mirai)", "value": "c61101c0b87387d7e6ebdcefb6fa11fd", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143908, "uuid": "bcfc4a62-d4c3-4c2b-ba66-9b71b8e478b1", "comment": "Malware payload (Mirai)", "value": "65c1b5a4909e6f0bad16e48d4005f68d453936b72256564900537445582b0591", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143908, "uuid": "383c5c6f-bd02-4f07-a135-258330aa6f65", "value": "T1EF730985FC818E11C9C91376BA2E118E33036369F2DEB367DE116F10778A92F0A7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143908, "uuid": "6a6f6187-3524-47f9-8c6c-cebeb540b3ce", "value": "1536:LonSxRq3iPQRmtv9juMhCkmLI58Xwz1IUiRtFnAyLFp:FxUYQRC1jdOcAFnAyLF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770143908, "uuid": "b6f1e6cd-e36f-4b51-b5c9-18227a984932", "value": 75252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143908, "uuid": "5f4a11b3-4861-4d30-a587-8ceb406ee398", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7742f919-012e-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770143998, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143998, "uuid": "c8d0fec8-23cb-4dc8-a3b1-9694a1b32e35", "comment": "Malware payload (Mirai)", "value": "5aa264571c837179e6bcba297299a1a5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143998, "uuid": "d6405170-660a-424a-8528-8507434a5232", "comment": "Malware payload (Mirai)", "value": "e2b29014d4de16f628b0785438dd2de9a4003af819e7f9a266bd751415764b2b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143998, "uuid": "642cddf2-303e-44db-872e-e0c05ff28219", "value": "T17D634A12E83D1E17C0E4A47E12B78B69B2F5674F18A4879D3E350F8EFF615D0A6062", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143998, "uuid": "f79088a0-6da3-45d7-af1f-66260ad9ac16", "value": "1536:AB0Y7wl7LHPj/Nfi+FpFoi38UCaIYq0izNs:fuikypFxsUMYq06Ns", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770143998, "uuid": "2ceb2de7-e9d6-4d21-b7b6-e1864ed60a26", "value": 67536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143998, "uuid": "38418b45-209b-459a-bf74-9dd7937e573f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7893cb7-012f-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770144068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144068, "uuid": "3a0d95a0-00b6-45a3-97c2-865caec65018", "comment": "Malware payload", "value": "24421a1eba851e92649581a16e52c0e1", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144068, "uuid": "49e09640-dcd8-4527-8a31-ce7a34f4db4a", "comment": "Malware payload", "value": "0280f09908f1fbf6c9cf4ae050e7df2b412049d06314505151a4e50d347f75a3", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770144068, "uuid": "4faf3a42-8039-423a-8e2a-a3309eadaa86", "value": "T18DF4D8706801806AE89F72F566BA2FFDA1EE0E105780EEF355C02DE704716E639729", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770144068, "uuid": "25a302ab-2875-4633-bc45-fa99828b4bed", "value": "4bd229834078747e818e52da30b244a8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770144068, "uuid": "54c232e9-7059-4f53-afd5-50641f615921", "value": "12288:7F5f8memPDGdyWqR8+Jc6/acTxNwWaI1BmhuFPrYi49mKMeiWchJs+OwiCqYLkqq:7F5fzZWqR8+Jc6/acTxNwWaI1BmhuFPq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770144068, "uuid": "4fa145d9-8792-4b13-9a15-8d49910d92d4", "value": 762880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770144068, "uuid": "9734e03d-33ea-48ea-aebb-17b28d886ffd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94674734-0130-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770144358, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144358, "uuid": "62b31635-df43-4ac2-8fb9-a9aa15174bb2", "comment": "Malware payload (Mirai)", "value": "226dcfe477b4019516b6ff3442881a88", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144358, "uuid": "bd2946d1-e626-42b5-b252-0a00edf8a90d", "comment": "Malware payload (Mirai)", "value": "0cce20071a014da88feb55d7935d8525390f1bb31cc8259018f57ed1bb1292fd", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770144358, "uuid": "09efd9bf-2942-447c-9bec-5822840ae1fc", "value": "T17F9304756442F2BCEAB85074F40329E6265206093FDCD5E3AD87513BFF74788A22DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770144358, "uuid": "9a0818a4-50b4-46ce-952b-618f69acb685", "value": "1536:zKE9xDDpGRXEZNInWNoXmmKYVBIVCCfy0K9q51ZJ2E:lpGRXA3aWmxuR5voE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770144358, "uuid": "2f8d659a-03b5-4ce1-9a85-0506e7821394", "value": 91912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770144358, "uuid": "73c107d8-4a0b-462f-b1ad-41988b79e36d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4e201ad-0130-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770144493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144493, "uuid": "5954959a-6ffa-49b6-8dc7-f9180eac344f", "comment": "Malware payload (Mirai)", "value": "82af93028bbda723fb171e9160625e18", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144493, "uuid": "3b19dc38-d318-4689-8891-77001ef0c2be", "comment": "Malware payload (Mirai)", "value": "f2eb51eaf6ec0d4e1293922014c2df9fd4fa62ade85fc2e47c56269d37c030ba", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770144493, "uuid": "2487f3e2-c057-4db7-9b01-8e95b316f4e6", "value": "T134532882FC81DA03DAD02336BA5E51DE33257399E1DE3347AD126F213ACA91F0D6B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770144493, "uuid": "2ffe3180-f59d-4091-acde-01d3ed088f77", "value": "768:EZ7F/p1PW0C7vB6A5LLAcH2UO1ytmUA8Vg1xmKFDs/po7bHeBNu5bpsqnZUZ2Fve:ENFX/CTQA5hyKmUA8QxRg/MbpsCRFw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770144493, "uuid": "fa96a3b2-400a-4598-80aa-9c888d280d2e", "value": 63756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770144493, "uuid": "cf050bae-01b9-4843-8d95-b203f02a12fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d1e3895-0132-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770145097, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770145097, "uuid": "f7c66a16-8fc4-4401-94fe-27d5092e4b59", "comment": "Malware payload (Mirai)", "value": "fda611ee51ad842c9e062e69b919b431", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770145097, "uuid": "58a8ade0-39b7-4c92-8456-2809e8042ead", "comment": "Malware payload (Mirai)", "value": "1b9e17462a47afb7ba79400f147f699ca70909f51a971bab80e20177ae024ef3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770145097, "uuid": "6976c443-3b69-497c-a20b-f99575805103", "value": "T1A2531907BD4494FDC299D17C83BBB5BAC127307E123972DA2BD4FE1A5C46EA12E1D8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770145097, "uuid": "bb25c631-b551-46b9-882f-c0bf6b94261e", "value": "1536:A9f0oprcG5y4EbLJsqzfUjTQlHLqrDavn7:kZ9V5yDLJsqzfUCHLq6vn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770145097, "uuid": "1bc24dc3-c8fb-489c-8833-ca18026d878d", "value": 63680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770145097, "uuid": "f40f4272-dcb2-4e95-9587-7c76e9fb91bf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c7813b0-0131-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770145123, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770145123, "uuid": "8586d118-31a7-468d-9733-caf1954f0f40", "comment": "Malware payload (Mirai)", "value": "951d68fca6484746d106a1f539077dd1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770145123, "uuid": "a3cb8da4-242f-46a2-b72c-90d91ff5536f", "comment": "Malware payload (Mirai)", "value": "eb83574b4e79b73f2669e257643a06811b5a3d392ebc8597130bc8102b4a6b7f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770145123, "uuid": "2a6d6a9a-f0a5-4c65-a0c9-cfa5af6a7227", "value": "T16B83404D3E318F7CFFFD823493B75A659209339A7291C584D5ACE6022D6420E742FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770145123, "uuid": "30418ce6-8519-40ff-808d-42f3865c4a6e", "value": "1536:A6TEgHEeGxdltYYcd/d7LM9NADfu9QPJzthXbPiOr44FofCX:lwgHEeGdtYpvLMuJzthXbPiOk4FYCX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770145123, "uuid": "e8792d2f-db67-441f-864e-4816a6da6674", "value": 85008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770145123, "uuid": "9980fcc1-ce10-4f24-ad55-ac2e2cf28b79", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2f0b903-0132-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770145295, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770145295, "uuid": "3d55eb72-6afb-4818-9666-a7baffc656f7", "comment": "Malware payload", "value": "a1848ac308af7d0100c537c1e09f527f", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770145295, "uuid": "b9f0726f-f78b-4e86-9905-31a2006f77dd", "comment": "Malware payload", "value": "cebc3101883df3e476911566e4fb07cf290f2c921e886c320c7b969e77fa8a93", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770145295, "uuid": "67ac416a-dfbd-46ff-a801-688a02acf8dd", "value": "T175F4086064008427E89B21F467FAAFFE91DE1E191780EDF763C42E9744722E235729", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770145295, "uuid": "56e5693e-bca0-4fe9-aaaa-41e1aa77a616", "value": "6884702b1788f6cdb01eb438d7f402bf", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770145295, "uuid": "a2d0d46d-efec-40de-971a-6f1b3989b619", "value": "12288:TWDGBX22LuekEV04VULjN1ccTyMj6ZIecVZWRESOG3wqVASoXoc2GeATbpvBx6hL:TWDGBX2+zy42jN1ccTyMj6ZIecVZWREK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770145295, "uuid": "5493ce96-f623-4561-be11-0d5ce99bc122", "value": 771072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770145295, "uuid": "e008818f-5d94-4695-a01d-eb4b64deac0a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bd1b741-0133-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770145525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770145525, "uuid": "4e5bd338-9ba7-434d-b471-e993096f3270", "comment": "Malware payload (Mirai)", "value": "a43e2d42f8096f48b45aee49ba2e9b5d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770145525, "uuid": "79f02d1e-a32b-45ee-97f0-837640337b30", "comment": "Malware payload (Mirai)", "value": "e66306f6a71cb948e0b5f4e55e5159a2380e8d61d3923380ce25264db244aeee", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770145525, "uuid": "dd7f469a-cc88-426d-9ed1-f32b274076b0", "value": "T143433A4137984E03C0666AF8293F23D8C3FEEE8115F8F284261F9A0B8675E775559F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770145525, "uuid": "297c92f6-71c0-49a9-84f1-81d3b2bc5f41", "value": "768:/8qomMXR3O+1malRlm+RMWf5tcRpCSvVERrGoaTDbbzpUnAVt85iYrGl1GFvm79f:0rbS+TAFEZsPvanJiYrisFGV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770145525, "uuid": "d0524d52-714d-49bd-9040-4acef6e946d2", "value": 60408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770145525, "uuid": "47656f0e-8f27-455a-bfad-c1d98e45c5ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a25f60fb-0133-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770145670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770145670, "uuid": "74468139-1c98-4802-bb83-14b5b50c9394", "comment": "Malware payload", "value": "8d1a858a14fcfb4c66aee1296f3334f3", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770145670, "uuid": "df570903-79a7-4ff5-9a85-33253a9b39cf", "comment": "Malware payload", "value": "c903b8c302be00bcc9c50dc00dc20f816045019b93d601cd45e72bbce08598b3", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770145670, "uuid": "11b43fbe-23ef-4fd9-908d-96fa3f242a3c", "value": "T1DA0506602800C027E84B61F575FA6FFE959E0E250780EEF755C42F9744B26E239729", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770145670, "uuid": "f42fe916-75a9-404e-a0ce-1e7b4ae85238", "value": "3dba82b9bf867c8cae19b16a3b46d075", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770145670, "uuid": "6a000ea8-1810-4415-b8ef-ed02a97fc57c", "value": "24576:NSVamkvIFdrBYzhhPHGtFjbaqBCcpG0mGlVMxyLC7t6iQvlJdnUk2hfbqXNEr5nN:VmkG9XNE5nN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770145670, "uuid": "a5091243-11e9-4ddc-828a-40ef0ef421db", "value": 809984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770145670, "uuid": "27e93e3b-de1d-482b-aacb-2fe6dba5d033", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71f08773-0134-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770146018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770146018, "uuid": "37fc8963-b9ea-4455-89b3-4005d4e93ecc", "comment": "Malware payload", "value": "0cd1bc46b7c7a4273db5c6086b584871", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770146018, "uuid": "a3527238-9501-49e7-951d-b64d3e000426", "comment": "Malware payload", "value": "2af2343c7ba577798b81cb1adb96a2e3f7c9956b07b26aba6d9d775500c60ac9", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770146018, "uuid": "910c5b51-6219-480c-9f90-aa5f32451e9e", "value": "T115F4D7706801806AE89F72F566BA2FFDA1EE0E105780EEF355C02DE704716E639729", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770146018, "uuid": "23d75284-593d-4242-9ceb-20d36e39b4b3", "value": "4bd229834078747e818e52da30b244a8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770146018, "uuid": "75662687-337d-4fd9-82b8-7b41f58ea765", "value": "12288:uTmJYFanzRd0SJjFXhWefuVq878H17lY43MVMxPaKN8Xl12fDocanypAfYLycOKt:uqJjRJjFXhWefuVq878H17lY43MVMxPR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770146018, "uuid": "fae218f8-e1fe-4f66-b709-67513422a3d3", "value": 762880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770146018, "uuid": "ef1bf89c-48fd-4d2e-8248-98047346fcdc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e56c3110-e6e7-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770146230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770146230, "uuid": "2e3ec18a-9fa2-47fd-97aa-c56683556338", "comment": "Malware payload (Mirai)", "value": "335f942514776b7ec460851aef149762", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770146230, "uuid": "c644cb87-d46b-4f6a-bef1-bea526642100", "comment": "Malware payload (Mirai)", "value": "50fb71af4bd1a64094411511e589a57204996c4d710205183077c33bd519a691", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770146230, "uuid": "a3fb8ce6-499a-41ae-918f-40a71e264827", "value": "T1EF13E128178215E9E8BEF7790B968FA43DF52FACB6838C845D44F5875FA116420C3B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770146230, "uuid": "a5fd5858-2f16-4d4d-aafe-2be9c087efce", "value": "768:0pfyczYKDqEhkwk0CuRkvru68189JkekIQE2ubdOnoDAYV6aCTJgGlzDpbuR1Jam:0pfyczDDJDhSu68e/k0dDAYV6aCJVJu7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770146230, "uuid": "7ae135fe-97c2-4bf3-a9d4-c5610cb71d04", "value": 43844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770146230, "uuid": "45cc1004-15de-4c34-a349-b2c89cca9323", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c4bf5a0-0134-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770146661, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770146661, "uuid": "652159db-392d-4b4f-9942-26c59732a770", "comment": "Malware payload (Mirai)", "value": "badfb777eb116655d97aec1f5859c6c9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770146661, "uuid": "50f70d5d-4e48-4542-97e8-7c29edbb2fa3", "comment": "Malware payload (Mirai)", "value": "201c0b78693a3091d9a7e26aa7110c77beb13289ea5978f1edd4b1359567ea6e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770146661, "uuid": "e57b43dc-2040-4e55-a813-e2a730f2c218", "value": "T1BB435CC8E5D3DCF9EC150A702136EB718B73E93E216CDE97C79859639992603E8026", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770146661, "uuid": "1d04ac9a-1f2b-4710-ac1b-1599daae779a", "value": "1536:PZa1CnL8Hqk0txEuF/dSIqAER5Fs/Rzhk3M:A1CnL8H8TE8UAiFsZ9L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770146661, "uuid": "11deac30-f737-4347-ac0e-203891fddcbd", "value": 58672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770146661, "uuid": "661bd05d-c019-491c-9c91-b669be31f868", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fde676d2-0137-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770147541, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770147541, "uuid": "e522fc09-6c11-4ef4-9919-25cc19bc5839", "comment": "Malware payload", "value": "669afadfc836f36ab8169a1d70a5e46b", "object_relation": "md5", "Tag": [ { "name": "GBR", "colour": "#56a1e9", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770147541, "uuid": "15dcd73e-ef5a-4be9-a6a0-8b55c26b535b", "comment": "Malware payload", "value": "d1f997e9d36cab74d9b7c82335b21734e1c74b284d17a8b3df2aa3f4661d2f6c", "object_relation": "sha256", "Tag": [ { "name": "GBR", "colour": "#56a1e9", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770147541, "uuid": "37eb1aae-3b8e-47c3-8378-bd7689cf48d2", "value": "T116B012D327615C36E1054132423CC1139B32071CA10E06428441992808A3749C8C83", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770147541, "uuid": "a9f9c8c5-61fa-471e-a9f6-1a6bb538c40e", "value": "3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y9xqtQAltjp:6v/lhPfkCDtmywFghu9xWVXjp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770147541, "uuid": "42c93fa9-45cd-4b97-b64d-5f228c70023b", "value": 95, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770147541, "uuid": "287daede-50ba-443d-88cf-881f305c976b", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c18f794-0143-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770152478, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152478, "uuid": "ab1e9f37-642c-4620-9188-6b31349040f0", "comment": "Malware payload (Mirai)", "value": "18954f33b01308f27f1a01e2c2fe6598", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152478, "uuid": "24e79492-3b4b-4b4e-825b-320e7895a0c4", "comment": "Malware payload (Mirai)", "value": "f271b341ac651d6db74b9febd5abbee3391f6c53a340b48588f451f071d850c1", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770152478, "uuid": "3eaaa95d-3bd6-4711-a744-88f05bcfc697", "value": "T1F533950A2E11CFADFB6C873447778E21965833AA27D1D645E55CDA002FA038E741FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770152478, "uuid": "0e8b8de6-5d6f-454a-afa7-94013c010407", "value": "768:aPkmfAt3jJBWkEG3TQZRjLDOsowzFIZDr/1xpm2+MMK:AujXX9SOpwzSJm2n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770152478, "uuid": "fd96edff-69a5-4a72-bbd9-343ffb1ad71e", "value": 52900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770152478, "uuid": "841babdb-91a7-4e34-84bc-72aa336d0ab7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0a44116-0143-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770152646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152646, "uuid": "8c44fbe3-364b-4714-9762-8831fadf4f86", "comment": "Malware payload", "value": "605d3ab318b01cea4622fc4ae768de54", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152646, "uuid": "70c75de7-5508-40a2-a506-c69b749af29c", "comment": "Malware payload", "value": "529f346188bb4405fdd0480d3a7bcae6a94c9b95d29b9ab105131407a41d5cc5", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770152646, "uuid": "b3092fe2-0c8e-4057-aab6-c505d618d86b", "value": "T13035239CFEC8E72AC44156344497DA649A3AEC057FB2C043B333F1417A397B516DAB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770152646, "uuid": "ca30dc55-562a-47f9-9532-adfca919701d", "value": "24576:n5NCxM6bch8fe7Vw1SW5elJ/Kn8M2FSPHSVLkZGTCeenDzP:5oxM6Kwe7VkSWlEFSPLYRen", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770152646, "uuid": "29570666-a59a-424e-8b7a-fd3f9c723300", "value": 1080832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770152646, "uuid": "1b6cb053-aff9-4f27-afa0-19ca4aa69193", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e388c2a-e679-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770158775, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770158775, "uuid": "d1479277-1ea6-489c-9e0e-e4d3ea6ba049", "comment": "Malware payload (Mirai)", "value": "e48245f24b798bd0a48088a29497c12e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770158775, "uuid": "68771066-7522-4c57-bbb6-c10e17fe148e", "comment": "Malware payload (Mirai)", "value": "17e065d59586f2fc634de3340309c609b8ed11c7606df41e6583cba42571169f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770158775, "uuid": "bec27e5e-59fc-477a-bfd0-b5a57cbf09c9", "value": "T14883AE63C8362898C15942B5B1B4FE7B5363E5505A832FF715AACA769047EDCF80A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770158775, "uuid": "78dea615-ade4-444a-b7af-94bb8f02512f", "value": "1536:2/AoiowQ8rJQ7pGDWhKOKFj7k0GZQC1Gawsw78u:24oiPjewDWoOMZGZQBpV78u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770158775, "uuid": "d51d27ad-3731-4cb5-b7c7-3a1065197ebf", "value": 83488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770158775, "uuid": "89206777-3294-4723-8e3b-fac38e69f3b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770077301, "uuid": "735a4373-0094-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.162.133:60311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770077901, "uuid": "d8e21b38-0095-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.25.44:42390/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770077961, "uuid": "fc974a0d-0095-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.153.144:48832/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770078376, "uuid": "f3fb0bd6-0096-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.25.44:42390/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770079218, "uuid": "e9dac430-0098-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.84:33093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770080241, "uuid": "4bc367fd-009b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.215.152:49121/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770080419, "uuid": "b5dfe017-009b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.52.124:59622/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770080420, "uuid": "b68cf701-009b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.194.227.46:44172/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770081333, "uuid": "d6c99936-009d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.187.101:60768/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770081382, "uuid": "f37b8b0a-009d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.147.138:50812/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770081975, "uuid": "554c957a-009f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.215.152:49121/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770083047, "uuid": "d3ed2d20-00a1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/1773787694/GwcgFKk.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770083239, "uuid": "46a4cbec-00a2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.84.139:42170/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770083365, "uuid": "920806c8-00a2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.177.185:44207/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770083722, "uuid": "6651c6da-00a3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.231.21:47397/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770083826, "uuid": "a486c3a4-00a3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8428202012/ImsqnHs.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770084560, "uuid": "5a053578-00a5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.85.15:40454/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770084610, "uuid": "77ea63e2-00a5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.218.193:36087/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770084671, "uuid": "9c322479-00a5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.109.106:35850/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770084790, "uuid": "e3491ec6-00a5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://krisidev.com/css/scc.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770084857, "uuid": "0b2b87a5-00a6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.84.139:42170/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770084964, "uuid": "4b133d23-00a6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/1773787694/GwcgFKk.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770084991, "uuid": "5aa4e0a0-00a6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.46.26:47713/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770085389, "uuid": "481d3d1e-00a7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.246.70:55441/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770085568, "uuid": "b300ab1a-00a7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.2.183:37538/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770085698, "uuid": "003e6161-00a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.169:39103/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770086117, "uuid": "fa5a2719-00a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.218.193:36087/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770086228, "uuid": "3c39f2c8-00a9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.246.70:55441/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770086542, "uuid": "f7185c07-00a9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.46.26:47713/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770086891, "uuid": "c731de3c-00aa-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.74.51:58875/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770087319, "uuid": "c6a8f22f-00ab-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.95.84:37596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770087337, "uuid": "d1106256-00ab-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.100.210:46333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770087375, "uuid": "e80f1bc3-00ab-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.169:39103/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770087665, "uuid": "94ee65d9-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.241.248:38576/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770087677, "uuid": "9ba06cd8-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.27.58.33:52351/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770087677, "uuid": "9ba6da01-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.239.87:42065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770087677, "uuid": "9bb44363-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.194.152:33499/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770087677, "uuid": "9bf292f3-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.145.64:38728/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770087735, "uuid": "be4b5abf-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.76.196:43531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770087735, "uuid": "beb5db44-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.87.118:33093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770087735, "uuid": "bebe4624-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.25.212:60797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770087736, "uuid": "bec55e09-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.189.157:5001/x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770087791, "uuid": "dfe2a13a-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.151.149:34276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770087792, "uuid": "e0a2f416-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.209:58656/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770087793, "uuid": "e0ff8c53-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.151.149:34276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770087794, "uuid": "e1a516b8-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/bins/sora.mips", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770087847, "uuid": "014400e6-00ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://ilovehosting1.com/1.bat", "Tag": [ { "name": "quasar", "colour": "#6983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770088595, "uuid": "becc8d7e-00ae-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.226.236.8:60442/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770089587, "uuid": "0e762dfb-00b1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.43.138:39766/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770089891, "uuid": "c3a494e1-00b1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.204.206:38459/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770089892, "uuid": "c4231d7b-00b1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.226.236.8:60442/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770089961, "uuid": "ed427001-00b1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.30.130:34578/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770090435, "uuid": "0794caf1-00b3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.171:45149/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770090729, "uuid": "b70410a8-00b3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.41.21:33575/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770091330, "uuid": "1d57a9bd-00b5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.43.138:39766/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770091639, "uuid": "d5405d7b-00b5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.204.206:38459/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770092719, "uuid": "5970c7c4-00b8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.41.21:33575/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770092719, "uuid": "5970ce50-00b8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.234.127.139:18254/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770092959, "uuid": "e8159f2d-00b8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.214.103:57566/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770093259, "uuid": "9ae01088-00b9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.148.85:49275/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770093846, "uuid": "f9214546-00ba-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/www1day7/msdn/flash", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770094755, "uuid": "16c8a891-00bd-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.148.85:49275/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770094817, "uuid": "3bc8651a-00bd-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.4.117:54926/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770094999, "uuid": "a7f108a0-00bd-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.214.103:57566/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770095227, "uuid": "2ff50585-00be-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.37.105:46501/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770096075, "uuid": "29a76008-00c0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.248.28:38645/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770096622, "uuid": "6f5a1b43-00c1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.197.236:59363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770096674, "uuid": "8e4e09b7-00c1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.45.242:59638/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770096736, "uuid": "b394c59f-00c1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.52.124:59622/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770096916, "uuid": "1e8be131-00c2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.45.242:59638/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770097155, "uuid": "ad573241-00c2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.248.28:38645/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770097581, "uuid": "ab651ab3-00c3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.5.76:60497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770098125, "uuid": "ef821f86-00c4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.232.137.101:55980/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770098430, "uuid": "a56de259-00c5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.20.207:58396/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770098898, "uuid": "bc5d1c10-00c6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.164:53946/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770098963, "uuid": "e2fc1b07-00c6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.245.23:47101/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770099311, "uuid": "b2227628-00c7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.5.76:60497/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770099553, "uuid": "429af973-00c8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770099553, "uuid": "42c2288b-00c8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770099554, "uuid": "42dcadd4-00c8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770099562, "uuid": "4825c7ef-00c8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770099803, "uuid": "d7d67ffe-00c8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.232.137.101:55980/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770100094, "uuid": "84f53ada-00c9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.138.15:45331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770100147, "uuid": "a46fb331-00c9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://youtuxo.lol/YouTubeRU.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770100459, "uuid": "5e5211f7-00ca-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.152.137:34629/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770100643, "uuid": "cc505445-00ca-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.123.42:57039/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770100643, "uuid": "cc59c7de-00ca-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.245.23:47101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770100749, "uuid": "0b75a1ae-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://alternativas.ru/bitrix/cache/js/s1/universe_s1/kernel_main/kernel_main_v1.js", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770100787, "uuid": "21c81a80-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tawtax05.tos-cn-beijing.volces.com/E-Invoice.rar", "Tag": [ { "name": "ValleyRAT", "colour": "#4EFAD2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101050, "uuid": "bf0f289e-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.42.249.132:5000/SER%20Costa%20Luz/02%2012%202025/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101051, "uuid": "bf446f16-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.187:2213/Photo.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101051, "uuid": "bf44c586-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.187:2213/Video.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101051, "uuid": "bf4884e7-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.143.113.177:81/assets/forge/Photo.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101051, "uuid": "bf6901a2-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.143.113.177:81/assets/tesseract/lang-data/AV.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101051, "uuid": "bf69a3c0-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.228:2213/AV.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101051, "uuid": "bf82cf7f-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.42.249.132:5000/SER%20Costa%20Luz/12%2012%202025/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101051, "uuid": "bfb398d7-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.187:2213/AV.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101052, "uuid": "bfef5b79-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.228:2213/Photo.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101052, "uuid": "c01fb7c7-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.42.249.132:5000/SER%20Costa%20Luz/20%2007%202025/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101052, "uuid": "c03b6d69-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.143.113.177:81/assets/tesseract/Photo.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101053, "uuid": "c0ad722d-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.42.249.132:5000/SER%20Costa%20Luz/20%2009%202025/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101053, "uuid": "c0bbfc23-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.42.249.132:5000/R-02-RADIOLE/24%2012%202025/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101053, "uuid": "c0cbce84-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.42.249.132:5000/SER%20Costa%20Luz/15%2010%202025/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101053, "uuid": "c0db385c-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.42.249.132:5000/SER%20Costa%20Luz/16%2001%202026/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101054, "uuid": "c11551bf-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.42.249.132:5000/SER%20Costa%20Luz/10%2001%202026/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101054, "uuid": "c12536fe-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.42.249.132:5000/SER%20Costa%20Luz/20%2012%202025/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101056, "uuid": "c2491ced-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.42.249.132:5000/SER%20Costa%20Luz/07%2010%202025/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101056, "uuid": "c2498e5e-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.42.249.132:5000/SER%20Costa%20Luz/27%2007%202025/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101056, "uuid": "c25003b2-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.42.249.132:5000/R-02-RADIOLE/30%2009%202025/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101057, "uuid": "c2dfef3a-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.42.249.132:5000/SER%20Costa%20Luz/10%2012%202025/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101058, "uuid": "c3c5592d-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.42.249.132:5000/R-02-RADIOLE/11%2011%202025/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101059, "uuid": "c3fc48e7-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.42.249.132:5000/R-02-RADIOLE/31%2012%202025/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101059, "uuid": "c402447f-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.42.249.132:5000/SER%20Costa%20Luz/08%2008%202025/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101059, "uuid": "c420e357-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.42.249.132:5000/SER%20Costa%20Luz/24%2010%202025/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101059, "uuid": "c4564c7a-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.187:2213/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101059, "uuid": "c45fcb71-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.228:2213/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101059, "uuid": "c45fce00-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.228:2213/AV.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101059, "uuid": "c4612647-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.228:2213/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101059, "uuid": "c463e471-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.187:2213/AV.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101060, "uuid": "c4841c46-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.187:2213/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101117, "uuid": "e69bb525-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.143.113.177:81/assets/tesseract/lang-data/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101121, "uuid": "e8ef656f-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.143.113.177:81/assets/tesseract/AV.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101124, "uuid": "eb129a39-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.143.113.177:81/assets/fonts/AV.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101141, "uuid": "f4f0a1be-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.143.113.177:81/assets/forge/AV.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101165, "uuid": "03a32bac-00cc-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.228:2213/Video.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101168, "uuid": "050b274a-00cc-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.198.34:49225/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101427, "uuid": "9f9e6cce-00cc-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.231.157:43285/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101466, "uuid": "b70d9b05-00cc-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.12/public_files/1J5P3r8.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101467, "uuid": "b7389ea5-00cc-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.12/public_files/mTotjSS.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770101905, "uuid": "bc8442fc-00cd-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.138.15:45331/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770102083, "uuid": "26993a75-00ce-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.100.225:34496/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770102257, "uuid": "8e3dc8fe-00ce-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.193.247:46392/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770102801, "uuid": "d28eb70b-00cf-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.50.61:47985/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770102914, "uuid": "15ebfc42-00d0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.231.157:43285/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770103268, "uuid": "e8c5e6d0-00d0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/beratmelodi8-coder/dd/raw/refs/heads/main/foto.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770103268, "uuid": "e90b36f5-00d0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/listiyor/inattv/raw/refs/heads/main/inattv%20-%20Copy%20(5).apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770103268, "uuid": "e919044b-00d0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/cixx123/ssports/raw/refs/heads/main/SeIcuksports.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770103635, "uuid": "c36ed810-00d1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.193.247:46392/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770103748, "uuid": "07300fa5-00d2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.100.225:34496/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770105509, "uuid": "2069151f-00d6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.244.198:54594/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770106027, "uuid": "55a4327e-00d7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6542402214/1CI8AsA.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770106269, "uuid": "e5579aa0-00d7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.49.249:33665/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770106520, "uuid": "7af316af-00d8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.249.140:33291/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770106747, "uuid": "0276227c-00d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.36.157:37750/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770106816, "uuid": "2bc424a2-00d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.195.186:53081/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770107422, "uuid": "94c6e898-00da-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.80.187:59076/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770108082, "uuid": "1e0dfe93-00dc-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.187.101:60768/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770108559, "uuid": "3ac88782-00dd-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.195.186:53081/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770108676, "uuid": "80887248-00dd-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.101.236:55365/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109282, "uuid": "e9778564-00de-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.1.254:43309/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109282, "uuid": "e984c9de-00de-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.3.84:58449/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109282, "uuid": "e99f00d6-00de-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.225.65:46384/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109399, "uuid": "2eea4675-00df-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.13.16:55574/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109463, "uuid": "555a5319-00df-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.243.40:50771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109519, "uuid": "76addee2-00df-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.0.37:35668/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109520, "uuid": "774b3f74-00df-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.187.25:55078/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109520, "uuid": "775e1b67-00df-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.149.142:44398/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109573, "uuid": "9719a941-00df-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.255.101:49640/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109575, "uuid": "98097d09-00df-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.168.248.205:46171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109654, "uuid": "c7786752-00df-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.168.248.205:46171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109754, "uuid": "028c4dfe-00e0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.131.196:55983/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770109765, "uuid": "09989fef-00e0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.230.87:51568/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770110478, "uuid": "b274858f-00e1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.49.249:33665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770110540, "uuid": "d78ca1cd-00e1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.70.215:40270/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770110540, "uuid": "d78f61b2-00e1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.244.67:37632/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770111020, "uuid": "f5347cd7-00e2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.131.196:55983/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770111373, "uuid": "c79b395b-00e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.181.155:58598/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770111556, "uuid": "3519d0dd-00e4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.16.133:51993/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770111618, "uuid": "59ec7df4-00e4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.136.134:48634/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770111619, "uuid": "5a2f63c2-00e4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.230.87:51568/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770112220, "uuid": "c095238a-00e5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.70.215:40270/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770112457, "uuid": "4dc2dced-00e6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.244.67:37632/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770112640, "uuid": "baf72a70-00e6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.181.155:58598/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770112700, "uuid": "dea53ce1-00e6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.132.196:45734/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770112941, "uuid": "6e87dfb3-00e7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.136.134:48634/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770113304, "uuid": "46cce2a5-00e8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://138.204.196.254:44018/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770113358, "uuid": "66e53431-00e8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.69.137:48604/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770113720, "uuid": "3e9b0086-00e9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.77.17:54771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770114026, "uuid": "f559c71a-00e9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.69.137:48604/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770114126, "uuid": "31006ad1-00ea-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.79.85.69:6041/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770114127, "uuid": "3153f332-00ea-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6919303532/va87vOa.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "MaskGramStealer", "colour": "#44b235", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770114128, "uuid": "31d8f639-00ea-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.81.120:52587/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770114198, "uuid": "5bd58f6d-00ea-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.135.223:41222/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770114560, "uuid": "33341f0b-00eb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://138.204.196.254:44018/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770115928, "uuid": "62d7233b-00ee-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.130.247:40550/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770116008, "uuid": "922fc6c6-00ee-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.79.85.69:6041/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770116537, "uuid": "cdf73c5f-00ef-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.32.128:49861/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770116656, "uuid": "1495995a-00f0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.217.230:41196/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770116660, "uuid": "171f5d54-00f0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.73.14:50130/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770116786, "uuid": "62514309-00f0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.124.46:35723/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770116951, "uuid": "c4d8c5ca-00f0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.145.46:39897/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770117081, "uuid": "12185d66-00f1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.145.46:39897/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770117082, "uuid": "12e782cc-00f1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.77.17:54771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770117197, "uuid": "571b7bb0-00f1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.236.42:51862/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770117382, "uuid": "c5933ff9-00f1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.16:53697/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770117432, "uuid": "e3349d1b-00f1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.210.38.155:32784/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770117496, "uuid": "091d3e4f-00f2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.130.247:40550/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770117670, "uuid": "70e7c866-00f2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.32.128:49861/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770117681, "uuid": "77690e9f-00f2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.216.71.153/x", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770117924, "uuid": "08b122c7-00f3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.195.182:59401/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770118031, "uuid": "487c6d2d-00f3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.73.66:56841/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770118221, "uuid": "b999df97-00f3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.30.25:57015/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770118521, "uuid": "6c808fc8-00f4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.224/nuts/poop?", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770118523, "uuid": "6d4912bb-00f4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.48.182:45380/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770118698, "uuid": "d5afa14b-00f4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.217.230:41196/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770119063, "uuid": "af83a034-00f5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.210.38.155:32784/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770119480, "uuid": "a824288b-00f6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.73.66:56841/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770119541, "uuid": "cc173adf-00f6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.195.182:59401/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770119784, "uuid": "5d5b1a7b-00f7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.30.25:57015/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770119887, "uuid": "9aa59530-00f7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dtlaxmiguptaclasses.in.net/TG88.apk", "Tag": [ { "name": "craxsrat", "colour": "#41d025", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "TG88.apk", "colour": "#d0400f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770120426, "uuid": "dbf525f9-00f8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.244.47.211:24954/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770120557, "uuid": "2a1feb79-00f9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.194.152:33499/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770120559, "uuid": "2ad5f465-00f9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.48.182:45380/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770120559, "uuid": "2aee1f80-00f9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.11.64.42:50434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770120802, "uuid": "bc00f3c9-00f9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.236.42:51862/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770121388, "uuid": "1938764a-00fb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6542402214/qDc1Kz2.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770121521, "uuid": "6881cf1c-00fb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.187.25:55078/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770122470, "uuid": "9de1bdd9-00fd-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.11.64.42:50434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770122543, "uuid": "c972c098-00fd-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.187.243:60638/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770122657, "uuid": "0d9f8dfb-00fe-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.204.171:53983/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770123378, "uuid": "bb711d10-00ff-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.149.204:41814/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770123549, "uuid": "20fde671-0100-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7302144605/dMksBLn.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770124221, "uuid": "b19733fe-0101-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.59.148:55779/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770124401, "uuid": "1d21682f-0102-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.84:46760/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770124578, "uuid": "86570413-0102-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.5.55:38907/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770124641, "uuid": "ac706c8a-0102-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.41.141:59790/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770124932, "uuid": "598f8ce8-0103-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.84:46760/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770124992, "uuid": "7d241c1a-0103-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.199.129:48780/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125419, "uuid": "7c1ba8b5-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.252.172:36721/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125491, "uuid": "a693a50c-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://korex.sbs/korex.zip", "Tag": [ { "name": "encrypt", "colour": "#e87d6c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125588, "uuid": "e0583ab6-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.178.196.139:9090/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125590, "uuid": "e1c34304-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.201.241.102:8081/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125590, "uuid": "e1ca9c9c-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.48.27.92:8080/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125590, "uuid": "e1f3dd4a-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.107.43.154:81/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125590, "uuid": "e1f40ef8-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.107.43.154:81/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125590, "uuid": "e1f4aff7-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.24.152.177:9000/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125590, "uuid": "e1fac59d-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.89.224.230/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125590, "uuid": "e1fc48f1-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.89.224.230/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125590, "uuid": "e2010dc6-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.71.208.42:8080/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125590, "uuid": "e2093055-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://98.195.187.75/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125590, "uuid": "e2097fde-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.223.240.1:82/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125590, "uuid": "e209e714-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.15.156.48:8090/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125591, "uuid": "e21c151b-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.139.213/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125591, "uuid": "e21c48a5-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.154.94.175:3389/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125591, "uuid": "e22ecac7-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.48.27.92:8080/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125591, "uuid": "e2385727-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.72.196.143:8088/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125592, "uuid": "e311a33e-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.251.92.179:81/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125593, "uuid": "e3794af7-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.24.152.13:9000/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125593, "uuid": "e379a621-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.240.237.3/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125593, "uuid": "e3c9cfa8-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.24.152.177:9000/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125594, "uuid": "e3e788b3-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.107.43.154:81/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125594, "uuid": "e3f9a92e-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.72.196.143:8088/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125594, "uuid": "e404f2b4-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.84.125.151/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125594, "uuid": "e44489f5-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.229.134.172/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125594, "uuid": "e46687c9-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://138.188.37.115/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125596, "uuid": "e56e014b-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://98.195.187.75/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125596, "uuid": "e58e689e-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.89.224.230/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125596, "uuid": "e59ad68e-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.139.213/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125597, "uuid": "e5d333cf-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.153.31.194/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125597, "uuid": "e5d78a2b-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.153.31.194/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125597, "uuid": "e5e13eeb-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.225.55.130/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125597, "uuid": "e5fc57b1-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.166.175.88:81/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125601, "uuid": "e80f7706-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.85.127.254/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125601, "uuid": "e8158787-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.81.55.23/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125601, "uuid": "e818ddf2-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.80.53.43/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125601, "uuid": "e84d6f24-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.84.126.26/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125601, "uuid": "e89a0256-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.187.17.64:8080/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125601, "uuid": "e89a0d3a-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.212.222.22/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125601, "uuid": "e89af248-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.166.175.88:81/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125601, "uuid": "e89b8f97-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.212.222.22/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125601, "uuid": "e89f2f15-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.240.237.3/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125601, "uuid": "e89f9c15-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.187:2213/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125601, "uuid": "e8a6747c-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.43.72.35:100/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125602, "uuid": "e8c68457-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.135.232/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125602, "uuid": "e8cb4416-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.152.48.137/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125602, "uuid": "e8ea0387-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.41.137.127:3389/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125602, "uuid": "e8f4601c-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.135.140.125/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125602, "uuid": "e8f47e79-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.233.251.59:8081/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125602, "uuid": "e8f5fc01-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.233.251.59:8081/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125602, "uuid": "e8f61db7-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.84.125.151/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125602, "uuid": "e9176f48-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.80.235.239/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125603, "uuid": "e9be74b2-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://138.188.37.115/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125604, "uuid": "e9ef12e4-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.166.175.88:81/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125605, "uuid": "ea7cc45e-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.201.14.128:8888/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125605, "uuid": "ea832f26-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.201.241.102:8081/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125605, "uuid": "eada9517-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.187.17.64:8080/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125605, "uuid": "eadc1a70-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.212.222.22/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125606, "uuid": "eb25cd34-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.228:2213/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125606, "uuid": "eb8486d5-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.139.213/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125608, "uuid": "ec42ae2b-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.217.40.252:41798/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125608, "uuid": "ec458cc0-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.240.237.3/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125608, "uuid": "ec4e671a-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.226.249.227:86/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125608, "uuid": "ec50edd5-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.15.156.48:8090/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125608, "uuid": "ec8e5976-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.228.11.239:8080/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125608, "uuid": "ec8e5b3e-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.210.69.144/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125608, "uuid": "ec946e11-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.178.196.139:9090/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125608, "uuid": "ecaa56aa-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.210.69.144/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125609, "uuid": "ed2c6df6-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.190.57.105:8089/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125611, "uuid": "ee2a0ca6-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.135.140.125/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125612, "uuid": "eec9c608-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.48.27.92:8080/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125612, "uuid": "eed674a4-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.71.208.42/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125614, "uuid": "f02ff491-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.215.243.113:8081/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125614, "uuid": "f032bdf7-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.190.57.105:8089/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125615, "uuid": "f0d322fc-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.152.48.137/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125615, "uuid": "f0e3bffe-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.15.156.48:8090/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125616, "uuid": "f1380462-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.82.215.73/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125616, "uuid": "f13ba8cc-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.7.236.161:8602/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125616, "uuid": "f13c5f99-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.212.222.22/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125617, "uuid": "f1a36d0d-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.107.43.154:81/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125617, "uuid": "f1b44921-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.152.48.137/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125617, "uuid": "f1e65b71-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.251.92.179:81/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125617, "uuid": "f1e94ae9-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.81.55.23/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125617, "uuid": "f1eca9dc-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.154.94.175:3389/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125617, "uuid": "f1f237fc-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.72.89.199:8001/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125617, "uuid": "f1f266f6-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.187.17.64:8080/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125617, "uuid": "f21011dd-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.72.196.143:8088/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125618, "uuid": "f23964ed-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.89.224.230/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125618, "uuid": "f23be92b-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.80.184.127/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125618, "uuid": "f2444365-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.154.94.175:3389/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125618, "uuid": "f245b8a0-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.217.40.252:41798/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125618, "uuid": "f2a4656a-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.251.92.179:81/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125620, "uuid": "f37b7317-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.24.152.13:9000/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125620, "uuid": "f39f5038-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.71.208.42:8080/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125620, "uuid": "f3a24d7a-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.135.232/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125620, "uuid": "f3d350ed-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.218.212.85:81/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125620, "uuid": "f3d5e2ca-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.24.152.13:9000/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125620, "uuid": "f3d968f2-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.153.31.194/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125621, "uuid": "f4528c33-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.138.186/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125623, "uuid": "f57ca272-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.80.53.43/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125624, "uuid": "f5e49e69-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.217.40.252:41798/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125624, "uuid": "f6031674-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.72.196.143:8088/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125624, "uuid": "f60be9a2-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.15.156.48:8090/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125624, "uuid": "f60fe5ea-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.71.208.42/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125624, "uuid": "f6168479-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.209.135.175:5555/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125624, "uuid": "f6236c6c-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://138.188.40.217/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125624, "uuid": "f62dc0a3-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.72.89.199:8001/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125624, "uuid": "f64735d8-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.107.43.154:81/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125625, "uuid": "f68f4199-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.178.196.139:9090/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125626, "uuid": "f6fb2a59-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.251.92.179:81/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125629, "uuid": "f8f6f950-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.153.31.194:8080/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125629, "uuid": "f90cf670-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.153.31.194/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125629, "uuid": "f9184bb2-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://98.195.187.75/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125629, "uuid": "f91d93fc-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.240.237.3/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125629, "uuid": "f920d70c-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.80.235.239/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125629, "uuid": "f920d931-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.24.152.13:9000/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125629, "uuid": "f9329784-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.166.175.88/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125629, "uuid": "f93c2baf-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.229.134.172/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125629, "uuid": "f949fcdc-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.43.72.35:100/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125629, "uuid": "f953cfd3-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.223.240.1:82/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125629, "uuid": "f9559aa6-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.71.208.42/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125630, "uuid": "f971bb75-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.251.92.179:81/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125632, "uuid": "fabf507c-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.15.156.48:8090/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125632, "uuid": "faf26196-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.48.27.92:8080/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125632, "uuid": "fb1e60bf-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.225.55.130/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125633, "uuid": "fb6660f8-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.233.251.59:8081/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125633, "uuid": "fb672441-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.240.237.3/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125633, "uuid": "fb694fc6-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.187.17.64:8080/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125635, "uuid": "fc70afca-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.95.36.52/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125635, "uuid": "fc70c461-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.171.168.46/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125635, "uuid": "fc74ec6b-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.89.224.230/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125635, "uuid": "fc7508cc-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.24.152.177:9000/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125635, "uuid": "fc753145-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.89.224.230/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125635, "uuid": "fc756319-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.71.208.42/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125635, "uuid": "fcd325c8-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.229.134.172/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125636, "uuid": "fd3612e7-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://145.249.191.116/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125636, "uuid": "fd438a70-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.72.89.199:8001/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125637, "uuid": "fda45d80-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.201.241.102:8081/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125637, "uuid": "fe15dde8-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.80.184.127/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125638, "uuid": "fe2ed081-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.201.14.128:8888/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125639, "uuid": "fed5442d-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.215.243.113:8081/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125640, "uuid": "ffa8ae6b-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.80.235.239/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125641, "uuid": "fff1a14b-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.80.172.118/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125641, "uuid": "fff2034d-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.229.134.172/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125641, "uuid": "fffa383b-0104-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.225.55.130/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125641, "uuid": "001a3629-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.153.31.194:8080/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125641, "uuid": "0023f551-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.139.213/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125641, "uuid": "003bd7c0-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.228.11.239:8080/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125643, "uuid": "01248da2-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.215.243.113:8081/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125645, "uuid": "02887eb0-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://145.249.186.138/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125647, "uuid": "03ce8635-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.115.218.41/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125647, "uuid": "03d8244f-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.80.235.239/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125647, "uuid": "03db1cd1-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.166.175.88/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125648, "uuid": "047ef79a-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.166.175.88/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125648, "uuid": "04800411-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.228.11.239:8080/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125648, "uuid": "0480caff-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.41.137.127:3389/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125649, "uuid": "04bcba8b-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://203.121.236.145/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125649, "uuid": "04bd4143-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.218.212.85:81/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125649, "uuid": "04e7c629-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.190.57.105:8089/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125649, "uuid": "0543c021-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.25.201.166/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125650, "uuid": "0544d34e-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.178.196.139:9090/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125650, "uuid": "05dbb2ea-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.233.251.59:8081/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125651, "uuid": "05fd6328-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.153.31.194/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125651, "uuid": "062a2f0f-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.225.55.130/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125652, "uuid": "0689fe67-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.80.184.127/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125652, "uuid": "06c99cb3-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.153.31.194/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125652, "uuid": "06ccc5c9-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.212.222.22/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125652, "uuid": "06e3e833-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.89.224.230/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125652, "uuid": "06ea247b-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.135.232/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125652, "uuid": "06efe823-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.152.48.137/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125653, "uuid": "072a3fbd-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.72.89.199:8001/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125653, "uuid": "0747ba95-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.215.243.113:8081/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125654, "uuid": "0811f3d4-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.251.92.179:81/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125655, "uuid": "08b133f3-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.166.175.88:81/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125656, "uuid": "092aa34b-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.154.94.175:3389/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125656, "uuid": "093b1304-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.80.184.127/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125656, "uuid": "093b7ff9-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://138.188.37.115/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125657, "uuid": "0980a61e-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.201.14.128:8888/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125657, "uuid": "09daa50e-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.71.208.42:8080/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125658, "uuid": "0a1e13dd-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.24.152.13:9000/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125658, "uuid": "0a5ab2ee-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.218.212.85:81/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125658, "uuid": "0a64562f-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.85.252.41/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125659, "uuid": "0b1bf293-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.25.201.166/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125659, "uuid": "0b214e6d-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.135.232/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125659, "uuid": "0b357c69-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.153.31.194:8080/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125660, "uuid": "0b8f8f19-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.24.152.13:9000/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125660, "uuid": "0b9ba4da-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.48.27.92:8080/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125660, "uuid": "0bb7c271-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.138.186/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125660, "uuid": "0bbfb1fa-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.166.175.88/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125661, "uuid": "0c5017d1-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.178.196.139:9090/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125661, "uuid": "0c5feb68-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.201.241.102:8081/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125662, "uuid": "0c8ca3f1-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.72.89.199:8001/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125663, "uuid": "0d354136-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.71.208.42/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125663, "uuid": "0d6b67d0-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.209.135.175:5555/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125663, "uuid": "0d71ef5f-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.201.241.102:8081/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125663, "uuid": "0d87307b-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.43.72.35:100/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125664, "uuid": "0ddae1e6-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.24.152.13:9000/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125664, "uuid": "0ddbb3a8-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.135.232/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125664, "uuid": "0ddbbf9f-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.217.40.252:41798/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125664, "uuid": "0ddbe410-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.82.215.73/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125664, "uuid": "0dfbb745-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.217.40.252:41798/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125664, "uuid": "0dfd7731-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.25.201.166/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125666, "uuid": "0ef3313c-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.166.175.88:81/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125666, "uuid": "0efc290f-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.209.135.175:5555/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125666, "uuid": "0f027226-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.48.27.92:8080/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125666, "uuid": "0f1a57e0-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.24.152.177:9000/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125666, "uuid": "0f516364-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.152.48.137/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125666, "uuid": "0f55b0ce-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.233.251.59:8081/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125667, "uuid": "0f9b8be8-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.154.94.175:3389/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125667, "uuid": "0fb07eae-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.233.251.59:8081/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125668, "uuid": "10086eb1-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.223.240.1:82/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125669, "uuid": "10d2227e-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.80.184.127/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125669, "uuid": "10d275a0-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.166.175.88/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125669, "uuid": "111dbf9a-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://98.195.187.75/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125670, "uuid": "1142e7bd-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.201.14.128:8888/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125670, "uuid": "114c5407-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.43.72.35:100/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125673, "uuid": "13388c37-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.215.243.113:8081/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125673, "uuid": "133fb237-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.82.215.73/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125673, "uuid": "136071ea-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.43.72.35:100/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125675, "uuid": "142eaf9b-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.201.241.102:8081/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125675, "uuid": "1480c5a7-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.139.213/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125675, "uuid": "14933a52-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.178.196.139:9090/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125675, "uuid": "14938957-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.166.175.88/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125675, "uuid": "14bd8991-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.80.184.127/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125676, "uuid": "15568551-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.139.213/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125676, "uuid": "1557087f-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://98.195.187.75/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125677, "uuid": "156b0c56-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.80.184.127/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125677, "uuid": "15d9396a-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.72.89.199:8001/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125677, "uuid": "15ede298-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.80.235.239/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125678, "uuid": "160177dd-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.24.152.177:9000/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125678, "uuid": "16030aed-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://98.195.187.75/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125678, "uuid": "160cdc4c-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.107.43.154:81/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125678, "uuid": "165fdbf1-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.240.237.3/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125678, "uuid": "16697605-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.43.72.35:100/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125679, "uuid": "16c9244f-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://138.188.40.217/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125679, "uuid": "16c974d4-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.81.10.241/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125680, "uuid": "1789a023-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.212.222.22/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125681, "uuid": "182b3593-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.215.243.113:8081/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125681, "uuid": "182bf7c4-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.190.57.105:8089/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125681, "uuid": "182e509b-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.80.235.239/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125682, "uuid": "1890175b-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.201.14.128:8888/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125682, "uuid": "189305af-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.25.201.166/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125683, "uuid": "196ddb30-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.210.69.144/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125683, "uuid": "196e159e-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.228.11.239:8080/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125684, "uuid": "199b60ea-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.152.48.137/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125685, "uuid": "1a8ce67f-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://145.249.191.125/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125685, "uuid": "1a90bd3e-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.72.196.143:8088/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125685, "uuid": "1aa2cc0b-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.217.40.252:41798/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125686, "uuid": "1b044e87-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.178.196.139:9090/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125687, "uuid": "1b553a18-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.16.194.226:2550/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125688, "uuid": "1c069fb7-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.138.186/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125688, "uuid": "1c7747f5-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.229.134.172/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125688, "uuid": "1c7817d1-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.190.57.105:8089/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125689, "uuid": "1c9b2084-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.225.55.130/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125689, "uuid": "1cae9200-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.138.186/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125689, "uuid": "1cc27e10-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.138.186/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125689, "uuid": "1cd27b67-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.38.70.125/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125691, "uuid": "1e1e4a21-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.209.135.175:5555/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125691, "uuid": "1e249b0a-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.25.201.166/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125691, "uuid": "1e438ef5-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.71.208.42/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125692, "uuid": "1e82ce41-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.154.94.175:3389/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125692, "uuid": "1e91a662-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.223.240.1:82/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125694, "uuid": "1f9e11ce-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.212.222.22/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125695, "uuid": "2027d353-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.43.72.35:100/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125695, "uuid": "20282b72-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.228.11.239:8080/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125695, "uuid": "20432d4a-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.190.57.105:8089/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125695, "uuid": "2095745d-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.139.213/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125698, "uuid": "21f5a5bf-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.25.201.166/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125698, "uuid": "220e6859-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.72.89.199:8001/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125698, "uuid": "220e6991-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.80.235.239/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125698, "uuid": "226fddea-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.217.40.252:41798/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125698, "uuid": "2272b2f3-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.153.31.194:8080/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125699, "uuid": "2285104f-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.135.232/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125699, "uuid": "228b379c-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.152.48.137/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125699, "uuid": "228ea6a0-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.41.137.127:3389/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125699, "uuid": "228fe6fc-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.24.152.177:9000/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125699, "uuid": "2294175a-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.229.134.172/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125699, "uuid": "229a47af-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.41.137.127:3389/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125700, "uuid": "2331a8d9-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.201.14.128:8888/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125700, "uuid": "23365d50-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.229.134.172/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125702, "uuid": "248a7e0c-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.41.137.127:3389/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125702, "uuid": "24a8d026-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.71.208.42/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125702, "uuid": "24b29001-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.138.186/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125702, "uuid": "24bbb3b9-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.218.212.85:81/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125705, "uuid": "26616c60-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://138.188.40.217/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125707, "uuid": "27780ae0-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.251.92.179:81/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125707, "uuid": "27a4dd7b-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.25.201.166/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125709, "uuid": "286fb1e7-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.240.237.3/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125710, "uuid": "2946f9ce-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.159.138.186/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125710, "uuid": "294a174a-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.15.156.48:8090/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125710, "uuid": "295d01f2-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.80.172.118/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125710, "uuid": "296dcd8a-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.41.137.127:3389/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125712, "uuid": "2a48f73d-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.15.156.48:8090/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125713, "uuid": "2aef5a4f-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.48.27.92:8080/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125713, "uuid": "2b4ed722-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.41.137.127:3389/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125713, "uuid": "2b6341cf-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.218.212.85:81/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125714, "uuid": "2b7668f9-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.166.175.88:81/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125714, "uuid": "2b7e2b21-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.153.31.194/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125714, "uuid": "2b85d7b6-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.228.11.239:8080/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125715, "uuid": "2c2e1ed5-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.154.94.175:3389/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125716, "uuid": "2ca63c31-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.209.135.175:5555/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125716, "uuid": "2cc20778-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.223.240.1:82/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125717, "uuid": "2d5261ea-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.107.43.154:81/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125720, "uuid": "2f94a613-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.223.240.1:82/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125721, "uuid": "2fc1c694-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.85.127.254/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125722, "uuid": "3069be7f-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.187.17.64:8080/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125722, "uuid": "306b9946-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.218.212.85:81/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125723, "uuid": "310ca496-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.72.196.143:8088/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125724, "uuid": "31d9ea04-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.215.243.113:8081/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125725, "uuid": "326915b5-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.187.17.64:8080/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125726, "uuid": "32cc441b-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.201.241.102:8081/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125726, "uuid": "32d715a9-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.24.152.177:9000/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125736, "uuid": "38c50d88-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.225.55.130/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125736, "uuid": "38c510a2-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.121.236.145/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125747, "uuid": "3f47a4cc-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.82.215.73/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125749, "uuid": "40a49a8e-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.82.215.73/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125751, "uuid": "41ee7295-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.82.215.73/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125855, "uuid": "7f885d47-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.210.69.144/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125903, "uuid": "9c46d6c4-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.135.140.125/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125913, "uuid": "a253baf2-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.84.44.76/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125947, "uuid": "b6d9b3f1-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.210.69.144/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125962, "uuid": "bfa9ab0f-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.135.140.125/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770125970, "uuid": "c47aa071-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.210.69.144/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770126029, "uuid": "e79ce373-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.135.140.125/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770126052, "uuid": "f556716c-0105-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.135.140.125/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770126363, "uuid": "aeb65d1c-0106-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.82.135.74/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770126370, "uuid": "b2713699-0106-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.82.135.74/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770126373, "uuid": "b480f9d0-0106-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.135.140.125/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770126374, "uuid": "b5261c44-0106-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.71.208.42:8080/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770126374, "uuid": "b5367b0d-0106-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.153.31.194:8080/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770126374, "uuid": "b536b2db-0106-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.209.135.175:5555/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770126374, "uuid": "b53c3382-0106-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.218.212.85:81/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770126374, "uuid": "b53e6078-0106-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.223.240.1:82/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770126384, "uuid": "bb119272-0106-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.41.141:59790/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770126384, "uuid": "bb533e33-0106-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.140.32:45112/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770126385, "uuid": "bba0a8a9-0106-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.20.134:36087/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770126805, "uuid": "b5f59f11-0107-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.29.24:46306/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770127220, "uuid": "ad543a13-0108-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.252.172:36721/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770127458, "uuid": "3b57576e-0109-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.59.148:55779/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770127697, "uuid": "c9b962d9-0109-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.20.134:36087/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770127994, "uuid": "7afe0492-010a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.160.217:60858/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770128236, "uuid": "0ac52e1a-010b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.107.184:56793/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770128346, "uuid": "4c5d732c-010b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8394616075/GV3hAjC.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770128359, "uuid": "542d972d-010b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.29.24:46306/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770128901, "uuid": "971e2bc0-010c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.246.91:40874/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770129071, "uuid": "fce19df7-010c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.89.122:44599/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770129127, "uuid": "1e4fba9a-010d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8428202012/GfaGPyy.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770129380, "uuid": "b4e05ee8-010d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.160.217:60858/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770129726, "uuid": "82e42081-010e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8428202012/WvXALLr.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770129910, "uuid": "f0e99cef-010e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.17.247:41284/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770130214, "uuid": "a60336d5-010f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.107.184:56793/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770130275, "uuid": "ca09694e-010f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.43:46499/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770130692, "uuid": "c2ddcd17-0110-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.116.100:35893/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770130879, "uuid": "3288071d-0111-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.207:42217/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770130936, "uuid": "548b3146-0111-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.253.82:41324/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770130937, "uuid": "54a52d68-0111-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.50.61:47985/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770130939, "uuid": "562aa3b6-0111-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.135.178.240:57976/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770130947, "uuid": "5aaf48d0-0111-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.22.49:48048/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770130988, "uuid": "7385a153-0111-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.67.122:54667/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770130989, "uuid": "7398c14b-0111-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.67.122:54667/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770130989, "uuid": "73c366a5-0111-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.201.149.196:56703/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770130989, "uuid": "74036419-0111-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.102.165:55855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770130989, "uuid": "740a356e-0111-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.6.177:41819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770130993, "uuid": "7605478c-0111-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.134.129:44292/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770131057, "uuid": "9c7a676b-0111-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.252.159.79:59437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770131058, "uuid": "9cecf8db-0111-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.238.66:44451/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770131177, "uuid": "e3e5556b-0111-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.226.69:60225/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770131415, "uuid": "71e72eba-0112-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.39.194:55141/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770131529, "uuid": "b5da541d-0112-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.227.3:55482/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770131890, "uuid": "8cda262b-0113-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.246.91:40874/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770131890, "uuid": "8d2dc70f-0113-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.116.100:35893/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770132258, "uuid": "68270bd4-0114-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.43:46499/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770133268, "uuid": "c2271531-0116-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.227.3:55482/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770133281, "uuid": "ca335c46-0116-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.120.223:39679/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770133578, "uuid": "7abef427-0117-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.228.76:42699/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770133693, "uuid": "bfb05512-0117-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.120.163:57295/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770133815, "uuid": "084e5bc0-0118-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.228.76:42699/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770133872, "uuid": "2a06b5e4-0118-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.46.101:51982/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770133927, "uuid": "4b104ecc-0118-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.25/uyhueba4vyri/assets/js/plt4x6yxgh?token=SSgiHhmOma8lIKzUanL6K6IUikN7sapC", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770133927, "uuid": "4b12f692-0118-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.25/uyhueba4vyri/assets/js/6mykabxk1z?token=SSgiHhmOma8lIKzUanL6K6IUikN7sapC", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770133940, "uuid": "52b9d367-0118-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.25/uyhueba4vyri/assets/js/ga2fxzy6bb?token=SSgiHhmOma8lIKzUanL6K6IUikN7sapC", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770133940, "uuid": "52b9fd52-0118-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.25/uyhueba4vyri/assets/js/5e8l3ay245?token=SSgiHhmOma8lIKzUanL6K6IUikN7sapC", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770133940, "uuid": "52c3908c-0118-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.25/uyhueba4vyri/assets/js/o1o21avp4e?token=SSgiHhmOma8lIKzUanL6K6IUikN7sapC", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770133992, "uuid": "71c04f63-0118-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.25/uyhueba4vyri/assets/js/9t0vmqqved?token=SSgiHhmOma8lIKzUanL6K6IUikN7sapC", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770133992, "uuid": "71c4470b-0118-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.25/uyhueba4vyri/assets/js/ewncooaypf?token=SSgiHhmOma8lIKzUanL6K6IUikN7sapC", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770133992, "uuid": "71c4661d-0118-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.25/uyhueba4vyri/assets/js/csfu0bxon6?token=SSgiHhmOma8lIKzUanL6K6IUikN7sapC", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770133992, "uuid": "71cf596e-0118-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.25/uyhueba4vyri/assets/js/s82tbzconf?token=SSgiHhmOma8lIKzUanL6K6IUikN7sapC", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770134057, "uuid": "989e17f6-0118-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.25/uyhueba4vyri/assets/js/c56xgl8yuj?token=SSgiHhmOma8lIKzUanL6K6IUikN7sapC", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770134350, "uuid": "46ebaea1-0119-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.60.126:39706/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770135190, "uuid": "3bfee9f1-011b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.128:42686/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770135677, "uuid": "5de84ecb-011c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.242.66:59958/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770135860, "uuid": "cb3489d7-011c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.207:45040/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770135975, "uuid": "0ffe261f-011d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.150.126:36342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136155, "uuid": "7b0bc24e-011d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.149:37027/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136633, "uuid": "97d81063-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/bins/sora.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136633, "uuid": "97db007e-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136633, "uuid": "97de700b-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/bins/sora.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136633, "uuid": "97deee75-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/zyxel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136633, "uuid": "9808546c-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/jaws", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136633, "uuid": "980dde1e-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/hnap", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136633, "uuid": "9812ec60-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/gpon443", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136633, "uuid": "9816deb0-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/yarn", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136633, "uuid": "9838cd6f-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/bin", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136634, "uuid": "985ac8cd-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/huawei", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136634, "uuid": "985ae464-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/pulse", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136634, "uuid": "9860f344-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/sora.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136634, "uuid": "9861fe5c-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/realtek", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136634, "uuid": "9863e2bd-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/pay", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136634, "uuid": "98661dbb-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/bins/sora.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136634, "uuid": "987b46b3-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136634, "uuid": "988b6ca9-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/bins/sora.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136634, "uuid": "988be854-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/bins/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136634, "uuid": "9892fd48-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/zte", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136634, "uuid": "989c7656-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/bins/sora.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136634, "uuid": "98a87f6e-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/aws", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136637, "uuid": "9a98de5d-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/goahead", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136637, "uuid": "9a98eb48-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/lg", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136639, "uuid": "9bbc1ea3-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/thinkphp", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136686, "uuid": "b7bc550e-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/bins/sora.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136688, "uuid": "b8e87f52-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/bins/sora.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770136688, "uuid": "b8e8a355-011e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770137168, "uuid": "d6bfd425-011f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.207:45040/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770137350, "uuid": "43696b37-0120-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.189.157:5001/amd64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770137350, "uuid": "436e0d2d-0120-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.189.157:5001/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770137350, "uuid": "436f985a-0120-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.189.157:5001/arm64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770137352, "uuid": "44a67f3d-0120-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.189.157:5001/debug_test2", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770137478, "uuid": "8faaf1f8-0120-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.149:37027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770137649, "uuid": "f58b4a42-0120-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-18ca5ea3b0f44c7d844d4d5f966d4555.r2.dev/TFG_Realty.exe", "Tag": [ { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770137770, "uuid": "3da739f8-0121-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-1104e072a45648cc8b244de88a4d3a77.r2.dev/INVITATIONCARD.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770137889, "uuid": "84537e7d-0121-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/stp26det/eval80/physx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138257, "uuid": "600f11da-0122-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.80/adb", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138308, "uuid": "7e9c1d15-0122-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-380573497f9c426fb28bfd79684d2899.r2.dev/UpdaterSetup.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138438, "uuid": "cbb8d27d-0122-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.45.173:55442/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138615, "uuid": "3511b9d6-0123-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.83/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138615, "uuid": "3518742e-0123-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.83/bins/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138621, "uuid": "39197d6d-0123-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.83/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138621, "uuid": "391c4c9a-0123-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.83/bins/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138621, "uuid": "391ec28c-0123-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.173/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138621, "uuid": "3920d143-0123-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.173/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138621, "uuid": "392124e6-0123-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.173/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138621, "uuid": "39213adf-0123-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.173/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138621, "uuid": "3925ad63-0123-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.173/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138621, "uuid": "3927740a-0123-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.83/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138621, "uuid": "39298e57-0123-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.173/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138621, "uuid": "3929b89d-0123-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.173/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138622, "uuid": "393202eb-0123-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.173/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138622, "uuid": "3932d95d-0123-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.173/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138622, "uuid": "394651d8-0123-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.173/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138622, "uuid": "39470bd4-0123-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.173/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138622, "uuid": "395261c5-0123-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.173/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138967, "uuid": "075ca279-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.153.31.194:8080/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138968, "uuid": "07cc9e32-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.192.219.165:8080/OUTWARD/ExportImages_121424_MAHAL-NODE1/info.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138968, "uuid": "07ccd665-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.80.208.206:81/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138968, "uuid": "07cd5f24-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.80.208.206:81/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138968, "uuid": "07cdb2db-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.134.38.7/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138968, "uuid": "07db6834-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.80.208.206:81/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138969, "uuid": "080a1c28-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.143.113.177:81/assets/forge/Video.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138969, "uuid": "08636092-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.143.113.177:81/assets/tesseract/Video.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138969, "uuid": "08771d48-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.143.113.177:81/assets/fonts/Photo.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138969, "uuid": "087721c8-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.126.29.17:8081/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138969, "uuid": "087814ba-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.126.29.17:8081/video.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138970, "uuid": "089efe9e-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.126.29.17:8081/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138970, "uuid": "08adffd8-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://20.3.252.249/UserFiles/UserFiles/Ravid/info.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138970, "uuid": "08aefe25-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.134.38.7:8080/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138970, "uuid": "08e15d54-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://20.3.252.249/UserFiles/UserFiles/Lior/info.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138970, "uuid": "08f366c8-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://20.3.252.249/UserFiles/UserFiles/Amir/ftp_files/info.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138970, "uuid": "092d7aa5-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://20.3.252.249/UserFiles/UserFiles/Or/info.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138971, "uuid": "0943af2e-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://70.45.151.28/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138973, "uuid": "0a84ab04-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.116.223.31:9800/Bilder/$RECYCLE.BIN/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138973, "uuid": "0ad22a3c-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.53.161.119:1817/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138976, "uuid": "0c809c2d-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.166.175.88/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138977, "uuid": "0d23cf40-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.153.31.194:8080/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138978, "uuid": "0d6cd8df-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.80.208.206:81/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138979, "uuid": "0e0c6708-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.71.208.42:8080/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138982, "uuid": "1041403d-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.85.164.228/photo.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138982, "uuid": "10573c9d-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.85.164.228/av.lnk", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138986, "uuid": "12527d5d-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.80.208.206:81/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138986, "uuid": "127f7119-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.80.208.206:81/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138987, "uuid": "134bd764-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://70.45.151.28/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138989, "uuid": "1436c34b-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.126.29.17:8081/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138989, "uuid": "146ad9cb-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.80.208.206:81/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138991, "uuid": "158e7c65-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.126.29.17:8081/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138997, "uuid": "194034bb-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://138.188.37.115/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770138999, "uuid": "19e7deec-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.85.164.228/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770139001, "uuid": "1b99c0f0-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.126.29.17:8081/av.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770139003, "uuid": "1c9da115-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.80.89.182/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770139007, "uuid": "1efe414a-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.71.208.42:8080/video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770139017, "uuid": "24bdec65-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.85.164.228/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770139017, "uuid": "24cb4564-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.143.113.177:81/assets/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770139019, "uuid": "25ddea8c-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.84.69.247/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770139019, "uuid": "265cfb79-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.84.69.247/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770139059, "uuid": "3e3482fd-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.143.113.177:81/assets/forge/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770139090, "uuid": "50738fb5-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.143.113.177:81/assets/tesseract/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770139098, "uuid": "5501658a-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.143.113.177:81/assets/tesseract/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770139107, "uuid": "5a7dfc30-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.143.113.177:81/assets/forge/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770139192, "uuid": "8d06ed5a-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.84.103.178/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770139193, "uuid": "8d8635f2-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.84.103.178/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770139343, "uuid": "e7198ff3-0124-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.80.89.182/info.zip", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770139396, "uuid": "070194c6-0125-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.80.111.146/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770139403, "uuid": "0af95a63-0125-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.83.8.252/photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770139408, "uuid": "0e2ad393-0125-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://armortra.xyz/8263.py", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770139408, "uuid": "0e4174f2-0125-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://armortra.xyz/8263.ps1", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770139518, "uuid": "4fcf06a4-0125-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.198.178.17:33845/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770139639, "uuid": "97854013-0125-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.11.215:36277/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770140179, "uuid": "d9881978-0126-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.45.173:55442/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770140786, "uuid": "430b4e6e-0128-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-2d4e9160a594401895eeff9104d72185.r2.dev/ch.exe", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770140902, "uuid": "8858d335-0128-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.198.106:49208/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770141022, "uuid": "cfd3b331-0128-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.225.180:39066/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770141198, "uuid": "38e8a2fc-0129-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.80.154.184:42504/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770141250, "uuid": "5801e4ed-0129-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.15.30:57820/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142038, "uuid": "2dd48b82-012b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.225.180:39066/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142455, "uuid": "25f092a9-012c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-8244226f50044b6aa27247a4f4218d8f.r2.dev/edocuments-1290.msi", "Tag": [ { "name": "PDQConnect", "colour": "#e7483d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142530, "uuid": "528874d6-012c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/bins/sora.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142530, "uuid": "529b9448-012c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/bins/sora.ppc440fp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142530, "uuid": "52ac6294-012c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/bins/sora.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142530, "uuid": "52bf1511-012c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.177/bins/sora.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142581, "uuid": "714fd94d-012c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.80.154.184:42504/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142868, "uuid": "1c0aad8a-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.15.30:57820/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142929, "uuid": "40d1dc43-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.12/7bu7d7l7ib9k/assets/js/xyjzzv1kno?token=7re5XLsZcnhRV6uBkVBQ7A2zAPxQTl9p", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142940, "uuid": "4751a2ce-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.12/7bu7d7l7ib9k/assets/js/hqq7nny98q?token=7re5XLsZcnhRV6uBkVBQ7A2zAPxQTl9p", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142940, "uuid": "475a256e-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.12/7bu7d7l7ib9k/assets/js/slrmb2087p?token=7re5XLsZcnhRV6uBkVBQ7A2zAPxQTl9p", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142940, "uuid": "475b38be-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.12/7bu7d7l7ib9k/assets/js/1syrrwf41f?token=7re5XLsZcnhRV6uBkVBQ7A2zAPxQTl9p", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142940, "uuid": "476071c2-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.12/7bu7d7l7ib9k/assets/js/hr7io9uyf2?token=7re5XLsZcnhRV6uBkVBQ7A2zAPxQTl9p", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142940, "uuid": "47665fe7-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.12/7bu7d7l7ib9k/assets/js/05zbsygrke?token=7re5XLsZcnhRV6uBkVBQ7A2zAPxQTl9p", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142943, "uuid": "4919e03c-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.12/7bu7d7l7ib9k/assets/js/7ifg0xcsnm?token=7re5XLsZcnhRV6uBkVBQ7A2zAPxQTl9p", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142999, "uuid": "6a44914d-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.12/7bu7d7l7ib9k/assets/js/djdpq0zzzy?token=7re5XLsZcnhRV6uBkVBQ7A2zAPxQTl9p", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142999, "uuid": "6a449ec7-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.12/7bu7d7l7ib9k/assets/js/hse3dapdmg?token=7re5XLsZcnhRV6uBkVBQ7A2zAPxQTl9p", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142999, "uuid": "6a9ac2f5-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.40.102:42068/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770142999, "uuid": "6aa6b947-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.116.112:38830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143054, "uuid": "8b01121b-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.129.53.170:33491/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143062, "uuid": "8fb8ff00-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.12/7bu7d7l7ib9k/assets/js/pcipdyaqga?token=7re5XLsZcnhRV6uBkVBQ7A2zAPxQTl9p", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143182, "uuid": "d753f2ae-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.143/pXdN91.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143182, "uuid": "d755a03c-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.143/pXdN91.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143182, "uuid": "d760ac26-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.143/pXdN91.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143182, "uuid": "d761af00-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.143/pXdN91.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143182, "uuid": "d76ddab8-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.143/pXdN91.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143182, "uuid": "d771bcbc-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.143/pXdN91.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143182, "uuid": "d77669f1-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.143/pXdN91.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143185, "uuid": "d8f1f147-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.143/pXdN91.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143185, "uuid": "d8f1f1ac-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.143/pXdN91.x68", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143185, "uuid": "d8ff3937-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.143/pXdN91.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143185, "uuid": "d8ff84be-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.143/pXdN91.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143185, "uuid": "d8ff9d8f-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.143/pXdN91.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143226, "uuid": "f16f7ad2-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.143/xc.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143240, "uuid": "f9f2ec4b-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.143/r", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143240, "uuid": "f9f39650-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.143/fp", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143240, "uuid": "f9faded5-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.143/h", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143240, "uuid": "fa125cc2-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.143/l", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143240, "uuid": "fa45e9da-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.143/ph.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143241, "uuid": "fadb62f5-012d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.143/pXdN91.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143477, "uuid": "877aebf4-012e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.243.40:50771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143526, "uuid": "a47cda64-012e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.12/7bu7d7l7ib9k/assets/js/entxenm71d", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143713, "uuid": "13d3e60c-012f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.103.74:2003/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143716, "uuid": "15840958-012f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.157.131.65:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143718, "uuid": "1707323e-012f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.157.131.65:86/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143721, "uuid": "18834ce2-012f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.209.110.219:86/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143723, "uuid": "19f736c0-012f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.45.65:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143724, "uuid": "1a7e2f6f-012f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.105.136.241/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143726, "uuid": "1be9eb34-012f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.187.46.17:8085/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143728, "uuid": "1c995bb4-012f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.12.6:8084/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143728, "uuid": "1d2c559e-012f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.62.202.150:10052/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143732, "uuid": "1f11ea99-012f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.209.110.219:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143732, "uuid": "1f1b2c6d-012f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.185.85.117/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143738, "uuid": "22add67a-012f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.143.55.11:4213/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143787, "uuid": "3fcc7367-012f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.142.48.141:5399/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143788, "uuid": "40738c5a-012f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.228.243.236:28059/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143791, "uuid": "42a9cd9a-012f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.40.178.238:53237/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143792, "uuid": "42cf6605-012f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.223.80.220:40402/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143800, "uuid": "47e0c8ef-012f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.242.128.123:22627/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143805, "uuid": "4abd0720-012f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.229.70.63:58694/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143815, "uuid": "50a238e6-012f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.179.238.100:25252/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143828, "uuid": "583321fc-012f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.97.97.79/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143829, "uuid": "58cffe39-012f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.105.18.59:10000/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770143829, "uuid": "59596d9c-012f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.140.161.160:8088/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144202, "uuid": "37a458c6-0130-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.190.53:53067/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144203, "uuid": "37cbcaf2-0130-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/Orbt/Orbt.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144203, "uuid": "37cd2e8d-0130-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/Orbt/Orbt.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144203, "uuid": "37cda46e-0130-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/Orbt/Orbt.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144203, "uuid": "37d138c7-0130-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/Orbt/Orbt.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144203, "uuid": "37d6c24e-0130-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/Orbt/Orbt.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144203, "uuid": "37db2b9f-0130-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/Orbt/Orbt.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144203, "uuid": "37db6540-0130-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/Orbt/Orbt.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144203, "uuid": "37ddc38d-0130-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/Orbt/Orbt.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144203, "uuid": "37e03f35-0130-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/Orbt/Orbt.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144203, "uuid": "37e11980-0130-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/Orbt/Orbt.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144203, "uuid": "37e7c43f-0130-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/Orbt/debug", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144263, "uuid": "5bdf8956-0130-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/Orbt/Orbt.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144263, "uuid": "5be3030b-0130-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/Orbt/Orbt.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144263, "uuid": "5be32f1a-0130-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/Orbt/Orbt.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144263, "uuid": "5bebad5d-0130-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/Orbt/Orbt.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144263, "uuid": "5c081ffd-0130-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/1.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144440, "uuid": "c57b4f3e-0130-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.52.80:58647/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144522, "uuid": "f5f9fa80-0130-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.255.8:45982/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144547, "uuid": "05226083-0131-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/745127296/6IL1oKn.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144620, "uuid": "30c1d60b-0131-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.129.53.170:33491/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144634, "uuid": "39188f5d-0131-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.200.143:41310/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144670, "uuid": "4e985e26-0131-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.136:40490/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144673, "uuid": "4ff7f7bb-0131-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-c3ef889672194c9c8a075c86375cfe17.r2.dev/E-INVITE.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144744, "uuid": "7ab69b37-0131-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.116.112:38830/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144803, "uuid": "9d79efa5-0131-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-62429b195c6842bc818f8fb4d1eec762.r2.dev/Docx_xlxs-rqs.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144864, "uuid": "c1efd0af-0131-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.107.104:48140/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144864, "uuid": "c23b6f76-0131-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.190.124:34668/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770144912, "uuid": "de5e29c2-0131-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-13fba6d38a5246708298bffda853443a.r2.dev/PARTY%20INVITE.msi", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770145696, "uuid": "b1accd48-0133-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.190.53:53067/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770146241, "uuid": "f6e9bdc3-0134-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.61.230:42540/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770146660, "uuid": "f03e3e64-0135-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.155.46:53592/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770146780, "uuid": "37c47bd6-0136-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.136:40490/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770147433, "uuid": "bd5fbe29-0137-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.201.25.146:43936/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770147557, "uuid": "07603bf4-0138-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.234.147:39232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770148218, "uuid": "911796d6-0139-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.221.7:46253/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770148278, "uuid": "b4a7db53-0139-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.155.46:53592/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770148565, "uuid": "5fc24db2-013a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.13/toto.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770148565, "uuid": "5fe6880b-013a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.13/tplink.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770148817, "uuid": "f626f292-013a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.201.25.146:43936/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770149358, "uuid": "387570ef-013c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.255.247:34783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770149414, "uuid": "59e25c08-013c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.120/file/bbc", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770150192, "uuid": "2a02b274-013e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.24.93:57055/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770150312, "uuid": "71688855-013e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.235.4:39504/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770150392, "uuid": "a114241c-013e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.127.76:56949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770150848, "uuid": "b0c7c78f-013f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.13/recovery", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770151396, "uuid": "f733c5d7-0140-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.255.8:45982/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770151457, "uuid": "1b927c76-0141-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.24.93:57055/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770151929, "uuid": "34eb654f-0142-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7782139129/QKZ9riR.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152056, "uuid": "808af430-0142-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.127.76:56949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152056, "uuid": "809dba47-0142-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.235.4:39504/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152477, "uuid": "7bece60a-0143-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.65.9:45709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152477, "uuid": "7bf6db68-0143-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.246.163.25:57117/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152478, "uuid": "7c7501bd-0143-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.15.157:37522/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152479, "uuid": "7ca1bfa4-0143-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.8.98:41068/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152479, "uuid": "7ce91c06-0143-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.30.159.104/x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152479, "uuid": "7ceb0c6d-0143-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.30.159.104/arm", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152479, "uuid": "7d0d4887-0143-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.30.159.104/mips", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152529, "uuid": "9abb0ef5-0143-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.134.38.7:8080/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152529, "uuid": "9abfa813-0143-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.134.38.7/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152534, "uuid": "9d6f0d74-0143-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.126.29.17:8081/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152535, "uuid": "9e4095e9-0143-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.78.200:49619/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152536, "uuid": "9efaca11-0143-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.128.66:38979/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152594, "uuid": "c16b37f1-0143-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.83:42807/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152595, "uuid": "c1e9d073-0143-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.44.14:35454/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152595, "uuid": "c1f14406-0143-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.84.104:49093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152595, "uuid": "c1f75c8f-0143-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.64.105:57796/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152646, "uuid": "e0ad98b7-0143-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8286964120/aTNXbz0.msi", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770152711, "uuid": "0762bc10-0144-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.166.175.88:81/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770153079, "uuid": "e285bed5-0144-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.125.28.149:38278/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770153544, "uuid": "f7f79166-0145-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/stp26det/eval80/net2", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770154027, "uuid": "175a6853-0147-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7782139129/YoyvvWi.msi", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770154574, "uuid": "5d51048d-0148-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.125.28.149:38278/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770154634, "uuid": "81875e98-0148-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.232.117:59528/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770155116, "uuid": "a0eecffa-0149-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.18.77:53687/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770155707, "uuid": "0101d993-014b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8428202012/SpYKTAw.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770156020, "uuid": "bb7d1ded-014b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.232.117:59528/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770156678, "uuid": "43bdbef7-014d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.235.112:50033/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770157393, "uuid": "edb51237-014e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.213.51:58689/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770157640, "uuid": "80fba76c-014f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.109.106:35850/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770157764, "uuid": "cb44f83f-014f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.187.84:37305/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770158420, "uuid": "523f2551-0151-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.246.72:37403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770158719, "uuid": "042a57dd-0152-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.185.93.188:44219/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770159075, "uuid": "d87dbf11-0152-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.187.84:37305/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770159909, "uuid": "c950f88e-0154-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8428202012/bIMApgG.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770159919, "uuid": "cf97044c-0154-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.246.72:37403/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770159977, "uuid": "f223d53f-0154-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.96.136:42426/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770161712, "uuid": "fc1edde4-0158-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6735477561/ItmqlqB.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770161836, "uuid": "45e0c756-0159-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.96.136:42426/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770162130, "uuid": "f5132bcc-0159-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.230.171:39161/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770162249, "uuid": "3c36f569-015a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.227.165:42767/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770162562, "uuid": "f707cca6-015a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.60.126:39706/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770162625, "uuid": "1c6553c1-015b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.239.88:48334/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770120424, "uuid": "daad9ea4-00f8-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.244.47.211", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143705, "uuid": "0f51073b-012f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.187.46.17", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770144664, "uuid": "4b0dfe3e-0131-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.70.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770077885, "uuid": "cf33ece2-0095-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.25.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770113705, "uuid": "35c62a3d-00e9-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.77.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770087724, "uuid": "b80f073b-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.87.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770135665, "uuid": "56eaf1c6-011c-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.39.242.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770088563, "uuid": "ac1f19e3-00ae-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.226.236.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143765, "uuid": "32c27191-012f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.229.70.63", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770150364, "uuid": "904785ae-013e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.127.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770087305, "uuid": "be68278e-00ab-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.100.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770144484, "uuid": "df9e0832-0130-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.255.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de56e011-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.218.212.85", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125591, "uuid": "e23a12b5-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.251.92.179", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125591, "uuid": "e21ec516-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.215.243.113", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de51b6a5-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.217.40.252", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109744, "uuid": "fcab18c5-00df-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.131.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770128224, "uuid": "04096e9e-010b-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.107.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770118207, "uuid": "b13f82fe-00f3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.30.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770152584, "uuid": "bb876f8a-0143-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.44.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770150185, "uuid": "258efccf-013e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.24.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770116524, "uuid": "c5e31182-00ef-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.32.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770116644, "uuid": "0dd8a54d-00f0-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.217.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770156664, "uuid": "3ba34a7c-014d-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.235.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770134345, "uuid": "44350004-0119-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.60.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770116944, "uuid": "c077f057-00f0-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.145.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770127984, "uuid": "74beda79-010a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.160.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770113345, "uuid": "5f171df8-00e8-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.69.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770107407, "uuid": "8ba70788-00da-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.80.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770152525, "uuid": "987673cb-0143-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.128.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109505, "uuid": "6e9058e3-00df-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.149.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109505, "uuid": "6e90536a-00df-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.187.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143705, "uuid": "0f50f8b3-012f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.105.136.241", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770144845, "uuid": "b67b2cb0-0131-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.107.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770122645, "uuid": "062f3302-00fe-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.204.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de52b4fa-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.48.27.92", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770116764, "uuid": "554d05ee-00f0-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.124.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770114124, "uuid": "2f97317e-00ea-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.81.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770135844, "uuid": "c1e9d218-011c-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.82.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770130924, "uuid": "4d0af27c-0111-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.22.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109744, "uuid": "fcab5e6f-00df-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.230.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125586, "uuid": "df414501-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.24.152.13", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de50213d-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.24.152.177", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de5032c5-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.71.208.42", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770089584, "uuid": "0c89cfcc-00b1-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.43.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770087664, "uuid": "940fd7ab-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.241.248", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770080406, "uuid": "adcffb69-009b-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.187.52.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143705, "uuid": "0f51c35e-012f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.157.131.65", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125591, "uuid": "e239fbb3-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.41.137.127", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770147544, "uuid": "ff4d225f-0137-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.60.234.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770126372, "uuid": "b41aabb4-0106-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.20.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770084665, "uuid": "9857ec4d-00a5-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.109.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770111605, "uuid": "522b0a72-00e4-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.136.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770087664, "uuid": "94101ad8-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.194.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770084964, "uuid": "4af29e56-00a6-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.46.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770130984, "uuid": "7122d8f8-0111-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.134.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770114184, "uuid": "538ef4df-00ea-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.135.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770155106, "uuid": "9a7fa842-0149-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.18.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770083705, "uuid": "5c48197a-00a3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.231.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143705, "uuid": "0f50b620-012f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.209.110.219", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770157744, "uuid": "bf2914a1-014f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.187.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770131406, "uuid": "6c4b8f2c-0112-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.39.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770098945, "uuid": "d7df810f-00c6-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.245.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138424, "uuid": "c3bd7511-0122-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.45.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143044, "uuid": "8562a5b2-012d-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.129.53.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770130924, "uuid": "4d0b03f4-0111-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.135.178.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de55fc53-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.72.196.143", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770146645, "uuid": "e77aec69-0135-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.155.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770124985, "uuid": "7966d263-0103-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.199.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770124625, "uuid": "a2c6c338-0102-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.41.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770118505, "uuid": "6310fbcd-00f4-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.48.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770157385, "uuid": "e92f5c77-014e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.46.213.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770141184, "uuid": "3091a2ad-0129-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.80.154.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138964, "uuid": "0575bc1a-0124-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.80.208.206", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770149405, "uuid": "54efdb64-013c-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "130.12.180.120", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125591, "uuid": "e27db635-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "138.188.37.115", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125608, "uuid": "ecc51a76-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "138.188.40.217", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de4eb104-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.107.43.154", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143705, "uuid": "0f518d12-012f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.185.85.117", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770144184, "uuid": "2c876438-0130-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.108.230", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125641, "uuid": "00291d8c-0105-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "145.249.186.138", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125633, "uuid": "fb9b513a-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "145.249.191.116", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125684, "uuid": "19895ab0-0105-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "145.249.191.125", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125591, "uuid": "e23e0d37-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "149.210.69.144", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138969, "uuid": "080c3164-0124-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.53.161.119", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770152465, "uuid": "744ce8fe-0143-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "160.30.159.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143825, "uuid": "569c58f3-012f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "161.97.97.79", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770087305, "uuid": "be6814ca-00ab-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.95.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770152584, "uuid": "bb8755ff-0143-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.84.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770085564, "uuid": "b09e592f-00a7-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.166.2.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109564, "uuid": "91aeee9a-00df-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.168.248.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de5109e1-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.229.134.172", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770142925, "uuid": "3dfb3de1-012d-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.12", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143765, "uuid": "32c2b5ce-012f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.228.243.236", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138964, "uuid": "05772275-0124-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "179.126.29.17", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de4e377c-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "179.178.196.139", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de4eda90-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "179.89.224.230", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770131165, "uuid": "dcc3c2c4-0111-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.226.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770130984, "uuid": "712374e8-0111-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.6.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770115924, "uuid": "60666b2d-00ee-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.130.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770087664, "uuid": "9410116b-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.145.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770144845, "uuid": "b67b1a8e-0131-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.190.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770117906, "uuid": "fda6ea17-00f2-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.195.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770162606, "uuid": "10e0d745-015b-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.239.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770126785, "uuid": "a9d9bfa6-0107-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.29.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770153065, "uuid": "da0eec2b-0144-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.125.28.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770152584, "uuid": "bb87622f-0143-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.64.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770101045, "uuid": "bbc372a3-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.30.204.187", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770101045, "uuid": "bbc37ce8-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.30.204.228", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143165, "uuid": "cd25c041-012d-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.242.3.143", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de514795-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "187.201.241.102", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de4fbaf8-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "189.135.140.125", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de506a4c-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "189.152.48.137", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125596, "uuid": "e5907401-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "189.159.135.232", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125617, "uuid": "f1fd549f-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "189.159.138.186", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de50a130-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "189.159.139.213", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125593, "uuid": "e3c39f9c-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "189.225.55.130", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de526401-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.166.175.88", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125591, "uuid": "e27da007-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.80.235.239", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125629, "uuid": "f93cc3dc-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "191.25.201.166", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143825, "uuid": "569c9cf0-012f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.140.161.160", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143705, "uuid": "0f51673d-012f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.143.55.11", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125602, "uuid": "e93923c9-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.80.184.127", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125586, "uuid": "df40712b-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "200.233.251.59", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125682, "uuid": "185b75af-0105-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "201.16.194.226", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de52aefe-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "201.223.240.1", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143765, "uuid": "32c28510-012f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.40.178.238", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125586, "uuid": "df406c7b-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.121.236.145", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125586, "uuid": "df3e4791-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.212.222.22", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770152465, "uuid": "744d0eab-0143-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.15.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770096065, "uuid": "238761b4-00c0-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.248.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770158406, "uuid": "4981db9f-0151-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.246.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125591, "uuid": "e233c1b2-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.190.57.105", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770130984, "uuid": "7122edde-0111-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.201.149.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770144184, "uuid": "2c875571-0130-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.190.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770152465, "uuid": "744cc05e-0143-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.8.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770109444, "uuid": "4a367ee3-00df-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.243.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de5c8497-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.154.94.175", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770102244, "uuid": "86760188-00ce-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.204.193.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770117424, "uuid": "deb2ff4f-00f1-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.210.38.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770133684, "uuid": "ba67261e-0117-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.120.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770102784, "uuid": "c87f9541-00cf-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.50.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de4f2265-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.153.31.194", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138969, "uuid": "0861ff03-0124-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.80.111.146", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125635, "uuid": "fccf825c-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.80.172.118", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de5052d2-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.80.53.43", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138964, "uuid": "05773101-0124-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.80.89.182", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125662, "uuid": "0ccf6128-0105-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.81.10.241", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de4fdf85-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.81.55.23", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125603, "uuid": "e9424c8c-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.82.135.74", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125601, "uuid": "e87125d0-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.82.215.73", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138970, "uuid": "08d9ef25-0124-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.83.8.252", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138964, "uuid": "05871cb0-0124-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.84.103.178", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125593, "uuid": "e3918ed5-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.84.125.151", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de54598b-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.84.126.26", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125709, "uuid": "28d84d85-0105-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.84.44.76", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138964, "uuid": "05768f74-0124-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.84.69.247", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de5003ed-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.85.127.254", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138964, "uuid": "0575c614-0124-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.85.164.228", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125590, "uuid": "e214ea0e-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.85.252.41", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143825, "uuid": "569c5cd2-012f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.105.18.59", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770112685, "uuid": "d5900e59-00e6-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.132.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770081305, "uuid": "c629940a-009d-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.81.187.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770141245, "uuid": "54cf666c-0129-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.87.15.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770093245, "uuid": "92d50624-00b9-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.148.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770087724, "uuid": "b80f13e0-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.216.189.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770087784, "uuid": "dbb72e00-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.179.151.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770159965, "uuid": "eaab94a2-0154-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.96.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770101405, "uuid": "92a556c4-00cc-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.231.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770116644, "uuid": "0dd8dc8a-00f0-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.73.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770128884, "uuid": "8d5010d7-010c-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.246.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770096665, "uuid": "89697f90-00c1-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.45.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770102065, "uuid": "1bd8efec-00ce-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.100.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770130984, "uuid": "7122a2b0-0111-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.102.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770081365, "uuid": "e96a5ef9-009d-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.147.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770162244, "uuid": "3940c96e-015a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.227.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770117184, "uuid": "4f749a2a-00f1-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.236.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770143765, "uuid": "32c2b119-012f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.242.128.123", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770133264, "uuid": "c0114f47-0116-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.4.120.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770126372, "uuid": "b41ab7cb-0106-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.4.140.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770098406, "uuid": "972a1346-00c5-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.20.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770129906, "uuid": "ee1dc2d6-010e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.17.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770144605, "uuid": "27d63c65-0131-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.200.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770087664, "uuid": "9410058f-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.59.239.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770100085, "uuid": "7f6a37f6-00c9-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.138.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138964, "uuid": "0575f22e-0124-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.134.38.7", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138606, "uuid": "2faf6446-0123-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.153.34.173", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770158706, "uuid": "fc30445a-0151-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.185.93.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de4fec13-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.240.237.3", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770133924, "uuid": "492f1b28-0118-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.92.1.25", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125630, "uuid": "f987cfdb-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.115.218.41", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125601, "uuid": "e895cd70-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.201.14.128", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770087664, "uuid": "940fea19-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.27.58.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de4f6d06-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.187.17.64", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770083284, "uuid": "618f64b7-00a2-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.177.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770130685, "uuid": "be83d44c-0110-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.116.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125405, "uuid": "73a5db68-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.252.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770106805, "uuid": "254cadab-00d9-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.195.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770084604, "uuid": "7478db97-00a5-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.218.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770140885, "uuid": "7e7ed263-0128-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.198.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770136144, "uuid": "7499972a-011d-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.156.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770090725, "uuid": "b4734af2-00b3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.41.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770086884, "uuid": "c312c219-00aa-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.74.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125605, "uuid": "eaaa7626-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.228.11.239", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125627, "uuid": "f80e8f61-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.171.168.46", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de5f12ac-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.43.72.35", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de50fa3d-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.15.156.48", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138970, "uuid": "08aab166-0124-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.116.223.31", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125619, "uuid": "f2f1aed8-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.95.36.52", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770087784, "uuid": "dbb76822-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.26.106.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125584, "uuid": "de55db9d-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "98.195.187.75", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770100746, "uuid": "09d9a97a-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "alternativas.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770139407, "uuid": "0d91faa8-0125-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "armortra.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770119885, "uuid": "999f126b-00f7-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dtlaxmiguptaclasses.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770113944, "uuid": "c443b341-00e9-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "fiveeightfourthree.oss-us-west-1.aliyuncs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770087844, "uuid": "ff5d36cc-00ac-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ilovehosting1.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770100745, "uuid": "08ff5b17-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "jm2026118.tos-cn-beijing.volces.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770125470, "uuid": "9a566d5e-0104-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "korex.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770084784, "uuid": "df88aef2-00a5-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "krisidev.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770137765, "uuid": "3a644048-0121-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-1104e072a45648cc8b244de88a4d3a77.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770144906, "uuid": "dafe461e-0131-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-13fba6d38a5246708298bffda853443a.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770137644, "uuid": "f2a4bae9-0120-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-18ca5ea3b0f44c7d844d4d5f966d4555.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770140765, "uuid": "36c77541-0128-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-2d4e9160a594401895eeff9104d72185.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770138305, "uuid": "7c868e1c-0122-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-380573497f9c426fb28bfd79684d2899.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770144787, "uuid": "940a0e95-0131-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-62429b195c6842bc818f8fb4d1eec762.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770142446, "uuid": "20ccb62b-012c-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-8244226f50044b6aa27247a4f4218d8f.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770144665, "uuid": "4b24c0d0-0131-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-c3ef889672194c9c8a075c86375cfe17.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770100745, "uuid": "090d2d8e-00cb-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tawtax05.tos-cn-beijing.volces.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770100085, "uuid": "7f8b3512-00c9-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "youtuxo.lol" } ] } }