{ "Event": { "published": true, "date": "2026-04-18", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-18", "timestamp": 1776557728, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "0d2e5f7d-2f55-428f-9907-53b5464d9b5c", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1776473828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776473828, "uuid": "3a94a0fe-32b4-450e-8e94-29853e60b6d6", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776473828, "uuid": "7f09d4d0-2c63-46b5-a94a-a9e9201aa8ce", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776473828, "uuid": "16fbe3cd-6375-48e0-b217-c4c74a6736bc", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776473828, "uuid": "ea3d2c49-0ec1-42cf-a594-f163a149afd7", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776473828, "uuid": "86b62bda-cf9d-4b8e-9dd9-dd3c27e66b32", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1776474608, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776474608, "uuid": "466f4ac2-e600-4f47-b837-a09799a298a0", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776474608, "uuid": "723bbeac-871f-4eca-874d-4f9186620116", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776474608, "uuid": "36fe035f-c3f6-4ca2-a18d-64101e939f26", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776474608, "uuid": "9c692c24-1087-493d-9cef-5d52453167a3", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776474608, "uuid": "c58c455c-f852-4627-971d-07d4b970940b", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776475328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776475328, "uuid": "9ab32620-36bc-4c40-8994-00f37abae2e1", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776475328, "uuid": "25a7bcb1-dc4c-4ce1-9aaf-08a9c9e0e0ab", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776475328, "uuid": "b76e5a79-f990-4dcc-b93e-55f74311aa42", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776475328, "uuid": "12b42ebd-8393-48d6-9262-bafb0cf2fb2b", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776475328, "uuid": "fcb75340-25e7-4ff8-8acb-a83ee7ebbefb", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20227311-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776476233, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476233, "uuid": "42c1e51e-4349-4013-bb48-13a9b87438f6", "comment": "Malware payload (Gafgyt)", "value": "5327d651e2908ad9e8535a7e920dd098", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476233, "uuid": "f54ee4c9-ed2b-4b3a-9e4f-eb7910c630aa", "comment": "Malware payload (Gafgyt)", "value": "237baa9e4af13c1326f7421d474401b06d836c7337b76b222d8676655392881e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476233, "uuid": "76780476-6de9-4c00-a7ee-6a65b84eeeaf", "value": "T173A35B82D642C2F3C4430AF1029F965A0532FB3A8A3B9EAAF75D7CF49B129D53115B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476233, "uuid": "5eacd937-d01f-4742-92e7-f5c79c2fed61", "value": "3072:aPaqjPQP39VjGWX98732V7kGyNVe5heTe7FXnf0OzTyoQQub:ahQP39VjGWXW9NVe5h+0FXnf0OzTyoQ7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776476233, "uuid": "2c23649f-ebaa-44cb-894d-b687aab4e671", "value": 99709, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476233, "uuid": "69f94c92-1a3f-45d0-a075-ef09aa11002f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45ab962c-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776476296, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476296, "uuid": "b624ebad-3ef5-422a-9f53-da68776c5493", "comment": "Malware payload (Gafgyt)", "value": "53a98e584b66a45783b5a724a5ebd4c3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476296, "uuid": "d0c9a8a8-bc02-4626-8670-4e17aec0381b", "comment": "Malware payload (Gafgyt)", "value": "1cf27b83f6d0ab542fcaeeb61459cd172defcd1cfbeadf1a248f4b20e8178b75", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476296, "uuid": "3b6b079f-8429-4c3d-b11a-f2abc615fb5d", "value": "T1F2D33B05D8509767C6D227BAF79E428D73236B68A7D733115A28AFB42FC1B9D1E3D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476296, "uuid": "163fe078-32fd-460f-8175-4655b80c5bc7", "value": "3072:4VfyQ+d+pceQGfBbPTa+jthWOiwzte6Xe45hLEDyh3O46dZBjUmydQCYMhEFg:CbPTa+jthoEXR5hLE+3C3gmydQCYMhE+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776476296, "uuid": "6e943019-c291-48fc-9b43-7d4d36b2498b", "value": 142751, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476296, "uuid": "3f913306-dae4-4a56-91d2-a0f62681332f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45b8ed49-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776476296, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476296, "uuid": "7d8dfe87-97c2-45d3-8d00-252bea5c14a1", "comment": "Malware payload (Gafgyt)", "value": "16363d24158c9ab3a394c518023a62b1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476296, "uuid": "e706dae0-a3b3-44d6-b231-fb8c661a01e5", "comment": "Malware payload (Gafgyt)", "value": "2225e62d389c91d864b1674419559a3336fd05af76020f4bf1b1d8b2707146f4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476296, "uuid": "79eb804d-72d0-47d9-b466-9f233ef023a8", "value": "T163A34A82A780D5B3D1A306F6129B8B150133FB3F4A6B9DA6F35D3CF48B509C57221B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476296, "uuid": "154b8287-8a48-4f2e-96f7-d825498f211d", "value": "3072:Jg4eodUWUh917j8mc2deiPUDAZURyPfb5hQTSvxinf0OzTyoQQub:JdRu917j8mc2H5Z5Pj5h8cxinf0OzTyv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776476296, "uuid": "c4fe1b7a-0ea1-43c5-8c34-58d19deeb2c7", "value": 99709, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476296, "uuid": "c26ac4e3-2f60-4dad-b95f-3a1ee9024183", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45bd9dd5-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776476296, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476296, "uuid": "d7b15107-069e-415b-9b7c-df8a3dc39f76", "comment": "Malware payload (Gafgyt)", "value": "b7afe654a7b332aa31be5779db5a9da5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476296, "uuid": "3cd7a5f2-037d-42fe-8e40-71c89ba28a6a", "comment": "Malware payload (Gafgyt)", "value": "f0d65338065ee6726d47d1522450f0dbc8e4821dcf99a236e0290e1728e6e60a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476296, "uuid": "eeac3379-0eed-4dbe-b412-cd40b6857f4d", "value": "T169C31905FD404B27C7D22BBAF79E438D773666586BD333115A296EB02FC1B982E391", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476296, "uuid": "b72033db-d86b-4cef-97a8-f377ae80a1e3", "value": "3072:4DJDZ+6lJQTnoo3jKiXb6DwXg/5hLNF9u+CyhAnjqojwQQRh6RYAvZR:4Gb6yg/5hLNF9u0ojwQQRh6RYAvZR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776476296, "uuid": "b166b71f-5ed6-4a65-8967-6a9c3dc1ba23", "value": 128317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476296, "uuid": "d1aff5b1-8601-469a-a3e9-e168b7401ca1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45befc36-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776476296, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476296, "uuid": "a6f4ce68-83b1-451e-9eeb-aac36df76b2c", "comment": "Malware payload (Gafgyt)", "value": "ba7ed3c283c7e6db1ebe2e4cda1037f5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476296, "uuid": "04cf4753-7902-4cdf-978f-b91627690f1b", "comment": "Malware payload (Gafgyt)", "value": "a1ff3a7eb9e3f77487a2b92a4fa58cee4220726bc4e06547e0a49707af6ee1a6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476296, "uuid": "ecee3985-44ff-44a0-8a2e-19105c2f1963", "value": "T15EB33A0798615F77C045ADB529AB5530072BBA120F4F1F99B57CAAF4074F8CEB40EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476296, "uuid": "44e55166-1a75-469d-941e-306f69cb3ca0", "value": "3072:btTQn622oNI8zpUS5hLwtOCwLkY0Px9gQNfR:btc6Vs/US5hLwtOLLkY0Px9gQNfR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776476296, "uuid": "308a31a6-5bf0-41ff-8a62-2a81fd57ca2b", "value": 108415, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476296, "uuid": "c1f2b006-4a24-4eec-8e90-15bfe151d09b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45c0a120-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776476296, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476296, "uuid": "f4b08b05-dbf4-45b8-9e1f-4408f353cd07", "comment": "Malware payload (Gafgyt)", "value": "7d1a23781ab4e502a7a4ffd146838764", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476296, "uuid": "f3778402-a5e9-4ce7-92e7-48746b510808", "comment": "Malware payload (Gafgyt)", "value": "fb2e27e8d47838721bba3a9e51c7ead6e214ef54ca80665b3165ec3a9f1ef201", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476296, "uuid": "f492c07f-420e-4955-a684-8cf8952f124f", "value": "T146E3A51AB7619FB3D81ECE3706AA4601108DE55A02ED6F6FB6B4C51CE78B84F08E3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476296, "uuid": "95c8e233-2856-4d17-8153-b37d48fc8398", "value": "3072:C2ttgUm6Oq+lozL5hdCNzhsURxuZq+1uPNd5R:C2ttgxq++zL5hdC8URxuZq+1uPNd5R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776476296, "uuid": "60aaae31-2cf6-421e-bc45-ccaa4a31d08c", "value": 154480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476296, "uuid": "357f2b3f-baa3-475e-af93-d4b2a1d887c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45c181af-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776476296, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476296, "uuid": "4b9c9eda-ee3d-4d40-a6af-f05d5eadcd48", "comment": "Malware payload (Gafgyt)", "value": "d677b0eea8b16f4151f20c2be0c76f2d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476296, "uuid": "44991e81-4fbe-4175-a9cb-202d6903a114", "comment": "Malware payload (Gafgyt)", "value": "b9d555c83c3b7769d4616af6c501ae8381a359582020a1168900e1b888e048d9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476296, "uuid": "bd9563ac-e6cf-42ac-b682-450e3837b6aa", "value": "T19FB33A57671C0B43C58B5AF12C7B37F187ADEA7112E225C5A40EBFC01B72A701626F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476296, "uuid": "79146fd7-c6c7-42e3-bf7d-39641a82eca2", "value": "3072:JHXrsU7PNZMHNrONBbsQv5hkqu4CK2QnI0PDG4gQNcR:J3LTMHNrOwQv5hkqH2QnI0PDG4gQNcR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776476296, "uuid": "b057d529-a40f-4fe0-8b13-a6d6bb55018d", "value": 116369, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476296, "uuid": "c0b27445-4687-4768-916e-6cbf4047c803", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45c22654-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776476296, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476296, "uuid": "ac746372-2cf8-4714-8f9b-ea0c569eebe4", "comment": "Malware payload (Gafgyt)", "value": "aa2be5960deaf42e6b4488c814a88692", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476296, "uuid": "39a22bbb-8efe-40d6-ac26-d14e3794834c", "comment": "Malware payload (Gafgyt)", "value": "bd888ba6f238ae46f62b918794d7788d46e35cc54dcfd5dfd74b41e0668898ca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476296, "uuid": "f4665976-b531-49b3-98c6-8c8807466a33", "value": "T121C30805FC404B27C7E22BBAF79E438D773666586BD733116A295EF02BC5B882D391", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476296, "uuid": "03d1bc41-d4da-4f56-94fd-e90b4540343f", "value": "3072:sJDZ+6lJQTnoo3nKVz3ecxPWQ5hLSFuX0wX4eoC9DQlD6ObAF5R:k3eo+Q5hLSFuDJoC9DQlD6ObAF5R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776476296, "uuid": "9af06cbf-29b7-487d-a576-77a7f823109a", "value": 120771, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476296, "uuid": "8ae1f8d9-a7ac-49c8-8344-34c89cfe87e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "631bf563-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776476346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476346, "uuid": "7db335be-493b-4906-aa1e-af3c4e98bd75", "comment": "Malware payload (Gafgyt)", "value": "e70edcb0a274008d4b8d7ed25efc0433", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476346, "uuid": "2a7dc44b-1484-4ad3-8eaf-7b6ad87d1973", "comment": "Malware payload (Gafgyt)", "value": "d55090f67a3883c43148e37fcc766053ce291e0a5e899f65c740983223d902ed", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476346, "uuid": "1f4153ac-4a21-4ce1-954b-ff0eeee25f94", "value": "T125C32997F800DE66F40AEA3605D70735B630FB720E531A7263573AA69E362E47827F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476346, "uuid": "77aba29c-82b8-4c6e-b71f-20a2c76278d2", "value": "3072:sMIrcVdOAnowHfbEqyasKJ3APbenmvI0PDGnSQNER:sMIrcPOAnowLyajJ3+qnmvI0PDGnSQNM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776476346, "uuid": "9b0051da-5647-4c8a-ade1-eb11916534c4", "value": 118298, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476346, "uuid": "9de8b3e2-5b1c-4700-b578-db4fed75bf3e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffeb8127-3ad8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776483910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483910, "uuid": "9439a627-99e7-4a24-a160-c56b8876650f", "comment": "Malware payload (Mirai)", "value": "3311266872f5b72bcfc50f4a114e059c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483910, "uuid": "d85e3dc6-25eb-4c66-9872-5a9c4961ff17", "comment": "Malware payload (Mirai)", "value": "4b8439389ea3a12075d752b3c10a29095271bd56fb23bfa969d18ea654fe7271", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "c6c8cccb-ab08-4ad4-9cee-490202f73557", "value": "T1DD63A506BF214FF7DCAFDD3749A91B05258C640B21A97B397E34D828F64A24F19E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "342bb1ff-a007-4ec1-88f7-a07bd291c89c", "value": "768:QxNCJ0EYlDYhHnKwqsFDwLX3U6ngBhN6PNUpGXS5SyeweVKe0n3oNWpkmPqXitMF:QxNCJBYl2FwwjhwPTXSNxIKzn6CpC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776483910, "uuid": "244c1160-26af-4910-a633-0dec1840c3fe", "value": 71528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "50b1ca42-04a0-455c-be69-2b4922dd542f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fffa7343-3ad8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776483910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483910, "uuid": "d2a0b686-b6fc-44db-9c26-9d77d8ba76e0", "comment": "Malware payload (Mirai)", "value": "d01c36066f3956d5c6eed81ede83ea0c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483910, "uuid": "cdcf61f3-b9f7-4428-99a8-75f9128e91af", "comment": "Malware payload (Mirai)", "value": "fba371894d19420e5511101596eea10157032fc7301c5abb2317e6e6ea4fea53", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "679a2a08-b3a1-4a9f-a71c-643a25b999e3", "value": "T11B63961A3E218FBEFBAC863847B74A219658339622F1C5C4E15CEE015E7034E745FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "c3c20d3f-16d8-4fd2-bbb8-018652b138af", "value": "1536:AHNFnXDuPq/SyZBp9tgI0v6bqfg/Kkz73o2x8tW:gNFXDKGruI0SWYz73o2Oo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776483910, "uuid": "4d66f5fb-3eec-479b-a3c5-d59d8ee55021", "value": 69080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "b598e34c-527d-48f1-a7b1-44df8645a4b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "000c39a6-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776483910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483910, "uuid": "f98f5260-c324-4084-a727-45948ee936c0", "comment": "Malware payload (Mirai)", "value": "9e2984a48f6726b8dab6b03cd7716601", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483910, "uuid": "2e4ca96b-2258-4d15-a04a-4ea2f7e956c5", "comment": "Malware payload (Mirai)", "value": "44b97a97d838e2de1e86196b2294ebf829406901345e44fea0f9821c74c050e5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "421347f9-a766-4342-bbaf-5c04adacf366", "value": "T1DE338DA6C5BDEDA8C1544AB87D258F389B73E00086933EFAD644C65A8047EECF1593", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "2e8f9a3f-c5ca-46b4-b52e-c681a79b1618", "value": "1536:5aR5ewtQZVt8GdcPs3q/aKlMLEm0DOFCn:5k5eDb2P+qiK60CF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776483910, "uuid": "a3731597-046a-4704-b983-f6c64b29fe7c", "value": 51336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "430b19ce-07d9-4115-af8d-4d189ee9ca43", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "000e1771-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776483910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483910, "uuid": "d098e037-df58-445e-bd55-1e5db4a9fe13", "comment": "Malware payload (Mirai)", "value": "aa3d4d6f29eff013e8b0435414b5af95", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483910, "uuid": "844d8df5-4634-4c40-b944-8d0e1b367ce9", "comment": "Malware payload (Mirai)", "value": "3149a2ece58dd0e413c7304de4a0e14d1dc31f74cf30e5faedeee38c42ba82fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "3358b269-8659-4f6e-8459-d9bed87d7210", "value": "T17F432925AD792E26C0D4B57A51F78714F2F2220E26B8C61E3CB21E4EFF04B4065577", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "5f751d25-a817-48c6-8cdb-afc8a426a065", "value": "768:TXon00+q9wp3C+vactfa1sDHLYAzsv6WswWSHoXdss63B/9JO+zC3+:TXw00+SY3CaactfI6Lvzsv6vwcGJF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776483910, "uuid": "1de5918f-ac62-4cff-ae73-1b9d98b2eeaf", "value": 60116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "32d12e6b-f202-4a39-bdfe-a670b4790845", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0012538a-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776483910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483910, "uuid": "75f48b14-eb67-4bbc-97a1-9e7f4ea95da0", "comment": "Malware payload (Mirai)", "value": "5498d7f2e41d6091c084f2b8cbc4882a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483910, "uuid": "7cd17163-5492-4ffd-879c-e8fe21de666c", "comment": "Malware payload (Mirai)", "value": "39670a4d645536086ce92fa7b666262d2bcc547916fefc19de25778155db4e51", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "79e726e9-0a58-4c0a-8a21-45f440c86590", "value": "T15E332942B22C094BF9E65AB0353F0FE093BFE98024E4B585695EEA458136F331586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "09bae315-b315-4649-a7ee-03daaed9d317", "value": "768:/KfsbnHAt1ezbnAgCN7RkIV3fgB1oRNRR7Eg3tbv6VFssuWXwdyLB:k6HAt1ezbnAXZUBU33tbC/3XwKB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776483910, "uuid": "5b8541fd-1185-409a-abfa-0ce46ac55c7a", "value": 51332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "5c2fbd92-721f-4627-9daf-2d2fdc75d9c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "001336a8-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776483910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483910, "uuid": "6c41ed0c-590f-4e24-8a6f-179d96648a09", "comment": "Malware payload (Mirai)", "value": "58a3019b295bd1fa04d927b22ec22084", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483910, "uuid": "e40458eb-7615-4ad4-b54b-f8fd39961ef3", "comment": "Malware payload (Mirai)", "value": "140c64145920ccb5e0871e7417a580422271d7b563b808746525d76c06900000", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "38b5bd00-0c29-482f-bf4d-71fdc96e6b0b", "value": "T1A03329DAB402AD7CF89FEA7E80160E0AF22123551053072B67BFFDD37E321549952E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "88fb05a5-590e-43d2-979d-de50990e493c", "value": "768:7MehvKgc46P1ZmWQc7/JgFHdIp8LujWeXzpUGRJTPOMdL88pISk:QIK34GPmbBF28Sjp1UGRJbOMdw8hk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776483910, "uuid": "3f1fd96d-c18f-4c63-8331-5cfccae8e8de", "value": 52800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "2b2d31ab-c315-43c9-8f7c-80661a92e80d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00154515-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776483910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483910, "uuid": "e594f317-7990-41e1-9789-4cf277ff8a1d", "comment": "Malware payload (Mirai)", "value": "d6e8cd5cfeda0bd17d4f776a2e51367a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483910, "uuid": "98fcfdac-cd05-46f3-94b0-06f1353795d6", "comment": "Malware payload (Mirai)", "value": "7ed6f137d6e1a635a6206ca4a598ff17363f2ed95e857b5d27a29b74e831aa7d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "9a23d9cd-a12c-4764-a736-707f863c8c5c", "value": "T1EAC32A46EA408B13C5D61777FAAF414A3322DB54D3DB330689285BF43F87A5E0E57A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "077881ef-066b-45e9-9699-ba920f116496", "value": "3072:IZMu4C+u2iLhLRE90bYK5h9T96NOh+5/YtM/9gM/:eMu4C+u9RfbYK5hb64+5/AM/9gM/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776483910, "uuid": "62bd6da7-4c14-4e33-8ad6-1b6fd1d80f21", "value": 128047, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "8ee0f67f-d13c-4d84-8d45-7c37ff0849b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00173e78-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776483910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483910, "uuid": "df5e7ec8-7788-4a08-814b-862b189d7c48", "comment": "Malware payload (Mirai)", "value": "92f6a46f4359c041742d1da4e38333c4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483910, "uuid": "0292bdcf-5174-43f8-b393-b1fffd20e5d0", "comment": "Malware payload (Mirai)", "value": "91d525cd43f5d07f105aac4e1477d3b60292645ddc86b089efbf0c0df9dbf7f4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "1b20fa03-0aa8-4e4d-9a5a-7a770854d86d", "value": "T1C4530985B8819A25C6D113BBFE1F018E3316576CE2DE73129D141F607BCB95F0E2BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "9f77e52d-0e88-4d9e-a637-1b16f0613ca0", "value": "1536:wdnIYoZXnYkTAcASlquASyAFzVLl1kHQwOcL/IBikcKJKWx:FFnRUcvlqRuhLlUQcKJKWx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776483910, "uuid": "ecba891e-c944-47de-bc56-47bf40525971", "value": 66688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "9ea5cf17-a6af-4b5e-a1b7-6330e9dab575", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "001bdff4-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776483910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483910, "uuid": "1fbc3a04-5771-4aae-bd94-920ba04e1bab", "comment": "Malware payload (Mirai)", "value": "25e7abfd57024a76ed16de19f246258f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483910, "uuid": "3fcd8f25-8aa3-4db0-9f5f-d28996d85e56", "comment": "Malware payload (Mirai)", "value": "f58158981b352b790d3c53fb755f5868db7f04b4429e318667bd639d642c320a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "0be16ce2-17ce-479b-a081-98551127cbbe", "value": "T1A02339C4B583F8F9EC15457C307B97729EB7F43A603AEDABC39994239815601AA072", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "0fc6307d-ed1b-4a3a-98d0-c454d1a75b23", "value": "1536:4LInPCqAAXJLE7cxtdl8NCqBNM7vk9YXPSP0Hoa:FCqxpE7cxtdl0Cqvsvk9sSMHz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776483910, "uuid": "a666fb72-ba64-4908-a8ab-67e6cf6e2e90", "value": 49752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "2c48d822-f420-4d77-ba11-d4d9a122a4c8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0023a757-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776483910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483910, "uuid": "01d396ff-da59-497b-8fef-edb99dd2e2cf", "comment": "Malware payload (Mirai)", "value": "88987b628c4e4993bbc8193fdd4b04b7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483910, "uuid": "7c6909fe-d015-4185-acc9-5c70ae139566", "comment": "Malware payload (Mirai)", "value": "ced05eb98adfeffebbccef107d117563ee5c3a589103a9f287fd8d1711b68579", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "dce4a67e-232b-418b-a4b8-b04f2064e5c5", "value": "T1402308C27941B639C3D157BBEEAF014E3354A7D8D1DA3397C8280B947A8A90F0D67B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "d768a4f4-c774-4d10-8092-bdec4e9121bb", "value": "768:sJeKpHsmyayL1ScT+GRvFES1un1wnjvsDoCerCw7sC/wnX+6k7wCVy/rCxHghW1r:sYFmSJScT4MjvR7sC4nXPfhWt59seD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776483910, "uuid": "af84a6d5-58d7-42f0-8678-c7bdb72ba1b6", "value": 49140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483910, "uuid": "2bfa0d30-ea62-4e46-b08b-290756c98c3e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "243b2c5f-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776483971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483971, "uuid": "f4164abe-72bd-43fe-ba22-5160a47f8816", "comment": "Malware payload (Mirai)", "value": "742a153005c7df282f7e964b36c311f6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483971, "uuid": "dd010db0-547d-4e58-ae44-50c1316c4502", "comment": "Malware payload (Mirai)", "value": "3f25fea74e736100af364387b55a019b1de3f85f497692e848859b39bad52676", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483971, "uuid": "5ee1caf5-bd10-4cbe-950e-a606aa0bd205", "value": "T1A34308C17881A626C7D05777FA6F018E37199798E0EA33538C291FA07B8AC1F0D677", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483971, "uuid": "14421bbb-0ef4-42d5-a58d-1928c4c19cbc", "value": "768:N1c82KhvRRTdj7tsq5sebD07B8drbonjxDdSYGSq/EanRP88UapvTLwCVy/rCxH1:Nb24Th7ttujxynRPJU8ShW+15RL+Sr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776483971, "uuid": "b3bc5898-64bc-4b0c-a5cc-80d73f421fb5", "value": 56584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483971, "uuid": "d8ce0f34-7848-4744-ad82-1a61de414406", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e77bbfa1-3adc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776485587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485587, "uuid": "5c28c9cd-c155-46a7-94fb-23b937d8b771", "comment": "Malware payload (Mirai)", "value": "d3f9f282a5a5e5e941875dca19a31b15", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485587, "uuid": "c53eff7a-80ba-445b-ad33-79a7648cc432", "comment": "Malware payload (Mirai)", "value": "5d1eccb213d13bed8f4c0ed2adbcbff8e9a1ce8a6f6306a3cbc7dad21d905ef0", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485587, "uuid": "7886b0fa-22b8-4103-a7cc-c84f38947c1b", "value": "T17B41ACD9109553306CF6DD7272E79468718190E399CEBE84D4DC78EDC8DEE44B082B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485587, "uuid": "2e1a1aeb-f694-4368-9a7a-a4bec9d6e6fb", "value": "48:vp2upZApKaOKaupiSpj+9pOYpNop5HQp8YpIypjcplopMp:vzQPrg9VgMjZyoO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485587, "uuid": "3c0bc417-cd85-4c8f-8ebf-2b38f781c332", "value": 2204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485587, "uuid": "bf456fd1-689f-40e8-b3ea-963e7755aaa5", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0cd4b01-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776485587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485587, "uuid": "f43ef44a-7b18-4f4d-b275-eef4c4f54db8", "comment": "Malware payload", "value": "e1390a13b62ee218b3b66bbc709c0555", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485587, "uuid": "ce5bb7b6-a355-4446-84ef-7896f7d7c3b0", "comment": "Malware payload", "value": "e007a72eefbb37d4f8f200edbe3ae06ad9a2569a1de70c09196a16d91081480a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485587, "uuid": "f573960b-b6f5-4756-99f4-fa4337520417", "value": "T1E74301ABC26294A6CEDB8D3C40FE35311DC030D1735D9F8E13499AD9FE6B94BA51A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485587, "uuid": "14d7c822-872c-4dcd-a6cd-b9676341fa2e", "value": "1536:ZzbmdcIvs+XYN+Z+eRGbG8F4AlWoVTxhvcb8mu:tuc8s+XYeRG54AooVTxNcVu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485587, "uuid": "4745b419-eecc-49ae-8203-7adb393d7adb", "value": 59420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485587, "uuid": "85352cc3-8078-4fc1-9883-d126b0ffc1e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8e8dda5-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776485588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485588, "uuid": "19636a1a-31c2-4f79-8bd4-27a73f0520fa", "comment": "Malware payload (Mirai)", "value": "9f41c68cf6184c5b698ebfa444e6a763", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485588, "uuid": "42fa91c9-6b2e-4442-b068-0724d40962a7", "comment": "Malware payload (Mirai)", "value": "f96cf5df19e0e98426e2d7584a789a36474f715895677dc0e417ed3f82e84253", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485588, "uuid": "cae27c5c-f36c-4896-a25d-4ebe96c51dae", "value": "T1EA145F72A94CCA87D826767D50A98F3BDD3E73EB2745CD017DD1203689E6ADB2807C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485588, "uuid": "d2988feb-d526-4357-bf20-9165351f2175", "value": "1536:D1Qt/D6d9H8yciWZ/168S+hfPgXMMnhiGmmAoIswLw8yfItTHK+xK7jK5tup+zpH:+acYWZ/thAMoonDLw8yfItTHvx7DWg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485588, "uuid": "f76bcf8c-2403-4119-96dd-e162800f03b6", "value": 205168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485588, "uuid": "7a59b34b-8c5f-4b0a-a6ec-5ee6265f7f9e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8ee9c1a-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776485597, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485597, "uuid": "d8b13181-02bd-4641-be62-a93649d340a9", "comment": "Malware payload (Mirai)", "value": "baf56d138828bcfd6fd8b52420c9169c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485597, "uuid": "e0f8833a-4e37-4fda-8b3f-90f4db5dc3ae", "comment": "Malware payload (Mirai)", "value": "dcfb97240032fb05f7b35ba963d8ed2be49a766976383dc1d9e71d1ea1ed1b07", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485597, "uuid": "ca640fb3-315c-4acc-8f75-8c1c9ddf8544", "value": "T14243F164D1660C19F2F5E77A29B90AD27AC097FD71ABC83B310867A647308BF10D56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485597, "uuid": "770ab428-7d8a-43d2-bc9b-213e775e0509", "value": "1536:ULJgl5oH4BiC8sOti7Fi2ndiL2o2EK/x3x0xrSu4u+qgw06WXl:ULGMH4UC8s1tNBJUf4u+qgwXW1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485597, "uuid": "39420127-9a8e-4d87-bbad-878c38586f13", "value": 56064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485597, "uuid": "bdf6191f-1894-4266-bb37-e51172a64711", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8f5f3d6-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776485597, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485597, "uuid": "19c103f7-37b3-4f63-9c22-6caf28b50174", "comment": "Malware payload (Mirai)", "value": "640995548918da036e53d491ba236e6d", "object_relation": "md5", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485597, "uuid": "79dfd53d-8540-49f3-b650-395bb6ca7df1", "comment": "Malware payload (Mirai)", "value": "b63290159d4975f21dcf3738f7593221b86a680116101d11e7679861ea582495", "object_relation": "sha256", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485597, "uuid": "c97c94c4-87c4-4cd0-bd6b-59a9d8b2c246", "value": "T1A3F3F971984CE6C7C53321BCA0ED9FBA8E7E72DB2B59CD027CD151309AD5EAB2906C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485597, "uuid": "bca55e5d-6d2f-4838-87dd-57a6d1df8c28", "value": "1536:wrUk158gadBSgy5vNK9rTt5dJHK+pK7DKrtwp+Vp+wEiMc1l88j:wIkL5vUVTt5dJcc1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485597, "uuid": "084ba3c1-61dc-4ecc-bfbe-867e8d84ecbe", "value": 166040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485597, "uuid": "db127564-8a8a-4fb7-9ea1-09ed2d86e596", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5f1697e-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776485597, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485597, "uuid": "03854c98-a84d-42e2-b28d-8f5beb4dd9df", "comment": "Malware payload (Mirai)", "value": "c6578bc6fe6bddec559377e34fbc936e", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485597, "uuid": "c7563f8a-6130-489c-9ad6-32ba27ff92e7", "comment": "Malware payload (Mirai)", "value": "2504bb7c770ac142d1fd4d36a8ed504b9f8b111d7c76ae53dda71f04a6185612", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485597, "uuid": "4a630c4a-1d6d-42b7-856f-a1ecdc39c2bf", "value": "T1DF8312D69A8D83A5EE67BC35DB3E8E33A525476D07413189F8C087197DBAA8023683", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485597, "uuid": "f572a849-41b3-4287-8b9c-dd071f872d0a", "value": "1536:VdfyC+aPw7a8XSGMFvEOpsBVugBeMKr7oqOzTiufSAxBqK6:3bvw7a8XSGMpXgBS7/pufXqr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485597, "uuid": "701890ec-2a7a-4d08-9d4d-ccaad439ecef", "value": 86924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485597, "uuid": "1efbdd36-f483-4dff-80bc-77e5430bdc18", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5a0d76d-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776485649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485649, "uuid": "a72bed58-9a73-461b-b0d7-55a9b80cad34", "comment": "Malware payload (Mirai)", "value": "c46ffc0e44dc51a2258f547943083542", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485649, "uuid": "6bb83ad1-56e9-4d98-b09c-364a29ee8a1e", "comment": "Malware payload (Mirai)", "value": "aec7929432c48afe30fd6be9e86b576e980bbfcfb11f6ae5e2bcd8a7505f1cf7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485649, "uuid": "095d52d5-84a7-48ee-be53-4f41cbab5a32", "value": "T1B133F1A2A38D9A59C7694C3B0D8B3F0F2539A71D8F5601B12D6C11292C9BF45F36E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485649, "uuid": "5f5eae9d-3e98-4e77-aaf4-52ddce97a0e9", "value": "1536:cLUxKzNNUip1vIHGaMJ5lVstfXM1jO3pT7nouy8NqV:yUxKzzPp1wHnMjlVfZO3FoutgV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485649, "uuid": "56100e8d-37a5-4eb4-ae1b-ab87c6f421f3", "value": 54532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485649, "uuid": "fa6ca371-9ffb-4bd5-bea9-745929e447fa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5b1ac3b-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776485649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485649, "uuid": "22aa9d30-ddb2-4493-91a8-09dd2d427aa4", "comment": "Malware payload (Mirai)", "value": "9fa3e4cb407b4a15244191292efac441", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485649, "uuid": "ba7ac1c8-920e-486f-948b-9696534a3d6b", "comment": "Malware payload (Mirai)", "value": "bd275f5b00c77a9fe5e2ce262693e820b22ab5515ffdbff1ebf907c50116b439", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485649, "uuid": "2e6fcc9d-1302-42ea-8ddb-6c90ce4d764b", "value": "T152141D32985CCA87C526127D60E9DF7ACF7E72DA2746CD227CD451348AC7E9B7806E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485649, "uuid": "3837d51a-b95c-4855-984f-f7d8121b9e43", "value": "1536:HM6kc9KcdvWtzjE3vUcoKVNWjFnD8W/Ctyr/4fNTlK+pK7DKrtwp+Vp+wEiwnP9Z:s6kc9KWvwzQPV0nD8UkNTyP9Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485649, "uuid": "eb737ce2-2b61-4a77-85fc-1486a64b09a8", "value": 190560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485649, "uuid": "03b13ab9-1afd-4c86-b981-1cd2478ba1ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8e56b20-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776485649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485649, "uuid": "5a82dd09-c112-493a-af6d-92df4faae110", "comment": "Malware payload (Mirai)", "value": "31f390fc1f0b87cdede503fc7cc66fc5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485649, "uuid": "c672e9f5-5975-4424-874a-7102cee1eca7", "comment": "Malware payload (Mirai)", "value": "6d0ccf790ff27fb69bb64e8f0d0a3b9ea6b250efd79ee7cd6fb93fe9d12dc09a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485649, "uuid": "c7a84fae-d0a1-4127-99be-e790b1593704", "value": "T1DC248272989CC587C122627D60EEDF7ADD7E72CA2648CE017CD118399AD5FDB3A06D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485649, "uuid": "72a3ed2b-0e39-47a9-a6af-d1e9c38f374e", "value": "6144:bwL4a7BE9vXgNEjExiE4/+tLr9PVk7UFb0q9XjBZn3CxOM+lT67KO:bwL4a76+LO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485649, "uuid": "73840520-9207-4298-9e0a-8d1aa57813a3", "value": 215148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485649, "uuid": "ef6a673f-13e2-4373-a86b-678d58f650d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8e2a411-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776485652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485652, "uuid": "1191922c-d12e-4736-911d-35ac7fa958f0", "comment": "Malware payload (Mirai)", "value": "d22de2ee4e454674ec20fd98cd03691e", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485652, "uuid": "2136d489-1f1b-408a-be8b-4c2e48d2b371", "comment": "Malware payload (Mirai)", "value": "5fe31001fd5c9c367fa4d13b1218e7408610396feb5a93fa6e05e595583f37b9", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485652, "uuid": "9ca5124f-e23f-4633-adc8-bde6939a67a8", "value": "T1415302F3E1CA252268A04CB8ACB78119D5215FFCC0BD1AA5392D69507F664CF83AF5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485652, "uuid": "446da66b-e559-4023-983e-9699c9d6ca98", "value": "1536:ANWX2Gc7l37FnwJM3Gt3pS41oIMzHsvTWwIAj3GBf0asHj9:ADGc7bwJM3GtZSPvgIaHJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485652, "uuid": "ed6c7fe1-06e0-4bd6-a60e-6ec5d973f06a", "value": 64408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485652, "uuid": "d4c2855f-f955-4485-8131-80e5640aca54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8e28b40-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776485655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485655, "uuid": "77cdb2ae-de04-4e79-b0b0-1e7be01360e1", "comment": "Malware payload (Gafgyt)", "value": "fbde4648edc3c5e2f533244feb87236a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485655, "uuid": "a7b25cd3-b731-4bac-9e0e-601674da4d34", "comment": "Malware payload (Gafgyt)", "value": "4573480fccf2943c780c4bfaddb8050f4bb589c4c58e17640a6c9035653d0de4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485655, "uuid": "ff2713bf-e1c4-4475-bde6-d41e4225c31e", "value": "T1C0430229175208E1CCA8C4F75BAE129C3C758FF3A962E48F560DCB59ED7107AE409B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485655, "uuid": "e9817ede-59f9-49df-ba19-464d9448a930", "value": "1536:6K7LSKy35Azdw2mXdh6OBVIzVYbIKmk/iK4WFE/2mVlVrYW:6oAYi2mXdhhLmVyliKQNfVrYW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485655, "uuid": "0628b0a9-3aa2-43d0-a2c6-373765709bca", "value": 58616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485655, "uuid": "b4a5ffcf-1d88-45c8-988c-4eb790bbbfc1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f017fe3-3a71-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776485658, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485658, "uuid": "091d96af-ada1-4ebd-b918-eee2e89458e3", "comment": "Malware payload (Mirai)", "value": "87e93207eed31f07958c608f23c35bf4", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485658, "uuid": "f49b45f5-398a-4027-861b-7090db20d894", "comment": "Malware payload (Mirai)", "value": "2f76237831c36b720f96d8061012f63dd3d4ea1b60772f6d17d7b51e7f81597e", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485658, "uuid": "ed56fade-85a8-4a5e-91c8-b80eb41a1d2d", "value": "T1A64302717E58327074B93AB478E58B83962E4E85BE7A30705BEE19FC918B046B1FC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485658, "uuid": "5427cc47-ea72-437f-b8eb-8b3612d014b6", "value": "1536:XQSaEzpAaza9tw0UVeVMn7sRVoHi9ueY2g9h:gNElA39taOei9nQh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485658, "uuid": "c5a75078-f4bd-4e81-8690-85bbd350969b", "value": 58620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485658, "uuid": "255dd015-7911-4176-85bd-3f5001178ce8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "771d9a6e-3add-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776485828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485828, "uuid": "d9de1ebd-9e72-4849-b2eb-938bd5ef26e1", "comment": "Malware payload (Mirai)", "value": "b17bb9c96e92ebe6dd83f56492efed82", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485828, "uuid": "a44e260b-8316-4b78-8c7f-ef048b5cad3a", "comment": "Malware payload (Mirai)", "value": "f5a4a397dd69f549bb9fd1b7e2d8123cbc2f02542d54cb584422027fa82d1709", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485828, "uuid": "4ab76c76-d325-426e-9c48-a8e5c2939cfc", "value": "T1FB636DE1F6167E7DC8AB2D3D948E2B4A7F1C5FE05A439110A0B2BE471AB31531D22D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485828, "uuid": "794b7cd8-a51b-40e7-a56a-37e0ba9ca381", "value": "768:FAHzyqbrtHyW+WNrf4UI7PgfVf910/Wt0FI02YW1sIiceZpvsUMCMt0vC5N9Eia4:6xRNcrmHKu0V2IpchUntvC5NTa2043P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485828, "uuid": "b24fac9f-b2d7-416a-9eb6-828cbbb407df", "value": 67124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485828, "uuid": "d1917291-d0d5-4720-a2ab-51786290c6b9", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7721600d-3add-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776485828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485828, "uuid": "081c78f6-eb27-47a7-be7d-33f0b4975ef3", "comment": "Malware payload (Mirai)", "value": "33e849176678c235c68babd560f97a9d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485828, "uuid": "6376f77e-414d-4841-b052-2907b1bf4208", "comment": "Malware payload (Mirai)", "value": "c2f27cdc6b8a184fd90e55a9fd2a794470f82fa703088f64f8fed6dbf0c0c323", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485828, "uuid": "01a2b9b3-4274-49e6-970e-e72bfe0ac2e8", "value": "T163433A60F947C1F0E44305B0016FFBAF5B36B9A60235E5ABEBA52932BCF17920C529", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485828, "uuid": "0ea660cd-b2e1-4106-b520-589422fd564c", "value": "768:xeyoO2qpMH0kxibkMHbmYZ5zaev3Iigs7kAgmedZvMg7grjtesO:xZoO2qpMH3iJbmOVhIdPdZp7g3tr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485828, "uuid": "4d9f957f-14a9-42be-beca-4fef8f7cddc5", "value": 58516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485828, "uuid": "4c86e45a-70db-4edc-9f03-46fe44c68f6f", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "772198ae-3add-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776485828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485828, "uuid": "3a93432e-4eaa-4d71-9b47-971b1ed386cd", "comment": "Malware payload (Mirai)", "value": "e4ecbb507541980d417bb9fc3ecf9041", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485828, "uuid": "6d6a63c8-5c9e-4393-892e-433ba8eaa588", "comment": "Malware payload (Mirai)", "value": "2f57b3bcdb141b72df9a816c8212094b27677466ec2e5ccd27e368a03ee26978", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485828, "uuid": "21b431ac-13a0-4bac-af42-c415648a7fd2", "value": "T165531995F880CA23C6D12276F69D554C37171BF8D2DE72028E202B346BFB95B0E27D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485828, "uuid": "da74964f-f93a-43e7-8938-7e2500442454", "value": "1536:8SMN9KbeuAbTWBTM8D1aClZIBaLLfEHngdlnzMeFdARnODj86OsY69Fe9AP:8SHhSS5hPLEHgdVjDj8T4gK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485828, "uuid": "fa9e1d83-752c-47a5-a284-3d3ef31d2516", "value": 62800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485828, "uuid": "e386894f-bed5-41a4-abe9-118064317cd0", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7724dee8-3add-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776485828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485828, "uuid": "a9ca2353-d362-49e8-bbf0-f5bc26acde54", "comment": "Malware payload (Mirai)", "value": "3c5bb5603f9199c4ce6e60584a164831", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485828, "uuid": "6ca6f8b4-4bcf-4a08-831e-cd4173d1b3b4", "comment": "Malware payload (Mirai)", "value": "a79620f0e5ad74df8db5a278e364c7b10ca2b4586f6dbc4d5df49faf4bb8e9fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485828, "uuid": "263f4977-af3c-4b1a-a5ed-153148ed86e5", "value": "T176432960FA53C1F0E44305B0016FFBAF5B36B9A60235E5ABEBA53932BCB17910C529", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485828, "uuid": "808076ae-0b1e-423d-899b-046ffd452679", "value": "768:Qo8F9YrG3GXD+ydXvAb9D3t5aJJi3+t0kkMgmB6Zv6i3g/jWPsg:Q1F9Y3z+kvAbB95UJi5Jo6ZF3g7WU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485828, "uuid": "c59b6f18-0d29-4717-8505-b6640dfb47f1", "value": 58516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485828, "uuid": "64408fca-ec6e-4608-9d36-b13c5d50a960", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7728809e-3add-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776485828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485828, "uuid": "4810dc9d-1f4f-490f-a77f-02543f538864", "comment": "Malware payload (Mirai)", "value": "a433f335699eb60b21f0f2f6c467c4aa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485828, "uuid": "b40c195f-3a57-432a-9faf-c6e4eaba82ce", "comment": "Malware payload (Mirai)", "value": "beb3ebf11c9f25024746abf223756e7632b3b564a29ffe8278591ef6de369484", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485828, "uuid": "f847a03e-f0f7-4697-bee7-26f9abc3fad6", "value": "T1C9830A48FE951BEBC0AFCE30151E472A199D188F63E2E3369278DC5874DA349D9E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485828, "uuid": "5b0a148b-f4de-4f12-aa83-467d498f721b", "value": "1536:gikxejeStbdVZeokH4fvsLv1+q85oIcNK9W:PkxQrdVZaMsLEqYw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485828, "uuid": "db20a2fc-f305-4a2e-b6fe-bb7506910ed9", "value": 88244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485828, "uuid": "e279a323-12fd-43c8-bc9a-0450afc39783", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79f5d394-3add-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776485833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "9a4dc069-7ffa-463f-b379-80ec2931b04f", "comment": "Malware payload (Gafgyt)", "value": "4c80104e69f5a23259aac667779b8311", "object_relation": "md5", "Tag": [ { "name": "85-11-167-21", "colour": "#1df840", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "44818475-0620-4608-88ab-7e330a1ac0f9", "comment": "Malware payload (Gafgyt)", "value": "12e63d51aa7c94004be7649e6a1362429a567cc842ea42c94210690e427cdfa6", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-21", "colour": "#1df840", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485833, "uuid": "c42e6823-2c2f-4f1d-b935-e447d4da5939", "value": "T1D13132CF22F20970ACD1A92732AA481476ECE1DB54C65F5B6CED78FA809DE1874107", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485833, "uuid": "6999303c-9b44-4fca-a3b1-d19a2a7e4a70", "value": "12:q0FkV0FO0F1Ic43fX0Fm8eekX0Fu0FuX0F2ge0FncfX0FQh0Fwl0FkaM0FMfWK0e:vk+L1Ic4km8asrus2gbnWs7wOkaF0KQF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485833, "uuid": "38e58e77-15d9-48d2-bc50-9f67763d4d1d", "value": 1561, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485833, "uuid": "afcedaec-8659-4538-8a5e-aec6dd2ef7c0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a0314e9-3add-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776485833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "a606ea87-5837-46be-aee1-25a9203a448b", "comment": "Malware payload (Gafgyt)", "value": "ec9aef51def59c3ec9b1b12963921051", "object_relation": "md5", "Tag": [ { "name": "85-11-167-21", "colour": "#1df840", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "e0963dc4-2fb2-4a7b-9bd3-bf84f679e186", "comment": "Malware payload (Gafgyt)", "value": "83738b72e30428025b3d3380f49ab28cdaab11f86e94a182dd6461ab8eac9bc5", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-21", "colour": "#1df840", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485833, "uuid": "9e8aea17-82b7-43c7-821c-22d90e462136", "value": "T1CEC32B273B231E23C0C9547102E31331FAB9DB6938B953D7E9D06DAC2F26A943456B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485833, "uuid": "8cae7624-422a-4ff4-9cc1-fbc95587f5f0", "value": "3072:/YNa/GLBNPoQnphakpiQ9/nYEP/UnSQf/R:6a/ylo4phakp39/nYEP/UnSQf/R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485833, "uuid": "90632774-c22a-44f7-8b65-edeff557f570", "value": 126929, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485833, "uuid": "64842e3b-4569-422f-a02b-c59e9beee7cf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a23dd5c-3add-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776485833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "c8dc0a5f-69ca-45c6-a8d0-fa3cf7bca281", "comment": "Malware payload (Gafgyt)", "value": "81d262344a4f6711a61e2e9ff6ef367e", "object_relation": "md5", "Tag": [ { "name": "85-11-167-21", "colour": "#1df840", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "1b9d8db8-46d0-4bad-8a0f-08de8d6fc869", "comment": "Malware payload (Gafgyt)", "value": "9dc5a09803bedff1e6edcb2fb8d490816e545cb4d0dfe238cd8410051db0fa9a", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-21", "colour": "#1df840", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485833, "uuid": "c367b54c-6f50-4e3d-a632-deb3ae3aa3a4", "value": "T18DE3766E3E21AFBEE268867107F75F70C395259326A19382E26CD7085F7128D1C5F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485833, "uuid": "e3e42cc3-6141-4ab7-bf47-a13141fa7774", "value": "3072:AvtLZpuGPyaT/B5hKWEfSaWURxuZq+1uPNd5R:cQORB5hKWLURxuZq+1uPNd5R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485833, "uuid": "dd4fdf86-f874-4df0-9a7c-725bec6bf987", "value": 154480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485833, "uuid": "2c3abc0b-ce83-4b57-83c7-314ba6d62c43", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a25bf21-3add-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776485833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "caad1068-9a51-4cce-81fb-b1d5250f2634", "comment": "Malware payload (Mirai)", "value": "4c52625e2007a672330eb52619d9d352", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "5241fc88-fe5c-4b61-a558-9840aa8930c2", "comment": "Malware payload (Mirai)", "value": "46244e7b99f714ca794fba9b1a27a949db3ec135b82651115cabfa6bdc540b69", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485833, "uuid": "97336bae-2916-4723-ab1d-742843774e9e", "value": "T13983E547B7118F11DB5AD63046B78B5B6AEA12C217D29946F32CDE103E6034C686FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485833, "uuid": "7ccf5bb7-8781-47c7-a086-a463a1185372", "value": "1536:Wv+MjIfNVJl+Yeg5GbHFF7ZSy/gCuZJICzEPi/+tsTDMuCJsLthmMwN:nHTGZjRFdezEPU5NLzTi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485833, "uuid": "b67ce067-0cb9-4958-b5ff-673e34fc96d1", "value": 88244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485833, "uuid": "e88b424f-03f5-494f-90a5-43026e742dcb", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a26c0e1-3add-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776485833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "2770c850-6ca4-4cee-b057-946cd091daf8", "comment": "Malware payload (Mirai)", "value": "37085a451077d24ebc06a5a0a0d965fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "b4afcd97-2cc0-4075-bea1-5aadf9704d04", "comment": "Malware payload (Mirai)", "value": "b26fa292a1bc8fcea067c5bf78795ee355cd2a8b3eb171469ebf1fa4d5c81311", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485833, "uuid": "85dbc734-f5d6-4560-b7f3-5fd9906e323b", "value": "T12DD36C00F7050AA3D4831E74173F0BB69B6899C265F5F2046A06BFA51B31EB76587F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485833, "uuid": "60d8390e-5b0e-4053-8cd1-2c2c32d0b312", "value": "1536:1AnpcT8ErxoyGwFgbW8TyreBfAxyazyMwkDB1R2/ex5dnO/IQ+U1XX:186xIioCxyOyM/B1R2/eYpH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485833, "uuid": "c45d3ba2-f49a-4b86-9e9a-df7737c11763", "value": 132260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485833, "uuid": "e2b5f930-dd69-4a23-b21b-1d8d47ba7a4a", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a28c0eb-3add-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776485833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "740242b1-5e90-471c-8c65-075c5cba796b", "comment": "Malware payload (Mirai)", "value": "5a48ecfd08f6684879ee63d11fc4e268", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "9271b1f4-0e9f-4f4a-844c-35e96d76d496", "comment": "Malware payload (Mirai)", "value": "5e5639c19a142a24b70f3ca27b9ab2e07d184d0a5048e803c831ef378389fec6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485833, "uuid": "d102e10f-01e6-4a62-9143-511962fe6c9e", "value": "T1AD433A50F543E2F0E5874270015BFBAB1F30BDB15229E5A7FBD43A72ACB1A854843A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485833, "uuid": "78115623-254b-4ad5-ac59-5e16700c4b7f", "value": "1536:r2sZ0kaHlP805u99hTIM2VYUZWOr+h/U:RZ0kaFP8hRAVYU28", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485833, "uuid": "eb0615a5-9784-4cc9-8b43-026c6b59c597", "value": 58516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485833, "uuid": "f14987dd-42e1-4c03-9a26-d3f48b35a558", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a2b6150-3add-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776485833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "f90be401-ba6a-45cf-bd23-55a123e7d820", "comment": "Malware payload (Mirai)", "value": "a39fed393f037a7b557dab1330fdda64", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "4c1191fa-0a27-4089-a4b0-120396967e21", "comment": "Malware payload (Mirai)", "value": "e0b6c9f7865c16a3ed3538622b3217fd83dd32782231415add71ad3b10adf741", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485833, "uuid": "297f526c-6d85-43bb-9de7-79ce83c689f2", "value": "T195530959F8408A23C7E521B9FA9D554C37535BF8C2D972028E205B317BEB89B0E3BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485833, "uuid": "95843741-f993-4a5f-b3f8-5b8cfc236563", "value": "1536:8PBNq2M6iq++J7mAh7xt7FuHd7m/A3dDQwps1bOoJ32UYfjJ9KAP:85AJqrhmgkm4t7oM/QK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776485833, "uuid": "133b4afa-27b5-4cb5-a636-9b145b336d20", "value": 62804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485833, "uuid": "e56008c1-4d25-4676-a5da-730395ee109f", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b88cad88-3adf-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776486797, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776486797, "uuid": "e2b7f6a1-efa3-4ab5-a087-3b1d3fdfdf3d", "comment": "Malware payload (Mirai)", "value": "02e9bb2a57a6c924818ff0883bf219e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776486797, "uuid": "87a53de0-c46b-46a7-b206-822af3b84e60", "comment": "Malware payload (Mirai)", "value": "0bc30af1a0ca30006e84b1d528dc6ab4548b1f8288ad9ed7a67861e013532545", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776486797, "uuid": "900e63a7-f99d-4f84-92e5-84b170c3c8d5", "value": "T1D193FA1E2E325FBCF769C23487B74A259398378637E1D585D2ACD5006E6038E642FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776486797, "uuid": "61c4d8be-fb05-4a0c-b580-5d9bf598865a", "value": "1536:OqLfvgboRu/ru+PvX7ljwtd8SmLTKWtM6iiei+bh:ONboIrfPvrCtdlm/KWy6i1bh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776486797, "uuid": "52cf4118-b1a3-497e-be26-0430f3717384", "value": 89496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776486797, "uuid": "49107db7-973a-4d96-afcf-7f4064e17509", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1be80411-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776487393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "93b2f9c2-9480-4688-ab2f-b2147102ae19", "comment": "Malware payload (Mirai)", "value": "f2f12dd04e6e0a7ff4f350d7360fc778", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "7074f305-8d2c-4c9a-92a3-152d48dafd36", "comment": "Malware payload (Mirai)", "value": "b6da5db60ce85a6e282d2bc822cf95b8162a35614c0b6355017c0628af37c84a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "5ab1b40a-9deb-4bf7-901b-03099dae06bf", "value": "T1E65302216A41C992543117B6F838A2F0BAAA1FF889F3B45766B06380F7E18915DFD4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "25a112fd-3a85-472e-9cd7-a679e06698d7", "value": "1536:maB0WJ2oDq1apy1CR3giAY8kIuS0Vv6sPmPMLV2ALlE6q:1B0t+qcLn4uS09PmPWVDq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776487393, "uuid": "5429cc7e-1e70-482f-8f9b-5f7a289b722f", "value": 63212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "cc560e66-d66f-4401-9d71-817d77a3d4b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1befc354-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776487393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "58b1735b-ec70-47ee-b600-facdb7a03800", "comment": "Malware payload", "value": "d75ea4b47eaf4f884667836bebd2f5c5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "ab8a9bb6-88b2-498f-b56f-76612173ee8f", "comment": "Malware payload", "value": "ad5819ebafc6590e5296df4f439c57d3e7f9f95b3376920a1060446457e5329e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "ff7c817b-77b4-4167-a0cc-aa2d0455ded8", "value": "T16C83123642F5D8B1E819913F879583C87F37E5180326835E22D7A2FFD189D07A354B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "5a0aeebc-d118-4c15-92c0-3373592005d2", "value": "1536:gUthA2poo3cqL/2L8o29kcDWvtBtUyZKF3rYSTO4AKCGTAH1Nvvb4i:B4vs/GcSOW1H1Zw3rnTlAKCGsVNvvb4i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776487393, "uuid": "713c3e12-aab2-4612-bc15-7a270bf71a87", "value": 87824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "3ce8e1a4-2f42-4c0f-bc68-8e7eeb80b745", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bf16049-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776487393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "abf2e616-f486-455d-bb75-4c99c4d5c374", "comment": "Malware payload (Mirai)", "value": "5fe25cfe5ff1f49793e25074c2c3e7a7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "e3d30a3a-c287-4373-a83a-19a0cf6f9444", "comment": "Malware payload (Mirai)", "value": "b027075674bd7f8fa70f09f28716deb234c20cc51425d4d210bee09789134d46", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "91bb2757-5c4a-4a2e-9961-d60fb5550ca3", "value": "T1C16301A1C581ECE570B91D375638E68870713678D9A4303B154E7ACAC791B4AB2FB3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "94f7b741-c726-471f-924f-23904611415c", "value": "1536:TtQj+VlhPCBkFmU5wUkvZ9a2sA1lDYNENrKgb:TtQjm7ZvOUkvZ9a2PMNEMgb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776487393, "uuid": "5ee92b00-d926-4aaa-9948-01c11aeff861", "value": 69664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "80750b08-4b57-498c-8dc6-48ee41890804", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bf1b1de-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776487393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "3ea3396b-bb2d-4257-a0cd-715d84ad9a5e", "comment": "Malware payload", "value": "b0426b03418c176582045ac06745566f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "10abf3e0-e6fd-4454-82e2-c868c5f40837", "comment": "Malware payload", "value": "f2d13c04e197ef02c716044392080dc3cd525734bf6daada9e0ac8d9265105e4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "08b74222-6296-438a-80bb-e52c10f3d1e9", "value": "T171530272A345C911E04B7FD6488DB3425B96C3E632BA46EB5081E703632671EF963C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "d8f4a14b-6305-42a3-9495-244ca024ead3", "value": "1536:QAlQcECQ0zTPjqlWSk5oUhB6t3+mqu7ea4uTG4tZ9hgMmZTRm3i4u+qgw0VuE:7RzTPelWJEx+aN3C4BhhmPmy4u+qgw2X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776487393, "uuid": "06a53b50-ed3b-4cf2-aefd-3973de976feb", "value": 64200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "15106b29-6342-4d2f-8198-a87bbf1a1d97", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bf2c243-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776487393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "5f1140a3-d67e-455d-a739-09325465f68e", "comment": "Malware payload (Mirai)", "value": "f012e3a951b2cef141fb3a2dd701ac76", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "0074e1c6-56c1-4fbe-be2a-3a287bdedc95", "comment": "Malware payload (Mirai)", "value": "02179c64a4e24d5787232db3e4acad0b9cd14c9b0bc9e99b6783da8ec311c060", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "2b911bcd-9aaa-42ff-bb67-8a166db55b10", "value": "T1EC8312FE522F1F79ED721C32CF764151320B2E2A341961E9C5B06997BE6D3E046C94", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "a04d9fd8-5131-467f-bfba-4d246fdf15af", "value": "1536:G/gWI2xC4JNVJrXn1k4B4fUJJABkLG5SDiHAg1gdtdLItu4FjFdT7SoDnp:GVIoJ7nq4efUbQkKs+HAgqd3LItdF3f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776487393, "uuid": "67473d39-9511-4f34-818a-d0893104f8cc", "value": 84544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "04daf729-43df-4672-86e6-644bd7258799", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bfc8cf4-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776487393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "159dbea8-bf42-4b86-b494-d4131eb0b2d6", "comment": "Malware payload (Mirai)", "value": "85945e524d6a22369b69e46383d03abc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "822038a1-a060-461e-9aa9-654bc215f07e", "comment": "Malware payload (Mirai)", "value": "9f527571d2586af8063e5a09227b3e4520b6c156462f0f947a5770a0bee1c984", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "5956826f-887c-4474-b33e-8357f5e72048", "value": "T12853F153DD129934CBB22CB1E6285B5274460B26CAED5C305688C6FAEBEF4C515B0F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "8a038052-b6d5-42c8-8082-3cfbd72e6e40", "value": "1536:kvoiB1wgkSLKUlOViVvlIcQPakZimrwcrQM:kvo4oSwoVORb7tQM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776487393, "uuid": "f05955b6-73c4-440a-98f9-b2024a235c25", "value": 65944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "30ed5bae-66f2-4cb4-8946-1b318114c76a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c002182-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776487393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "e9f7af64-8467-4556-9c18-6962f3e22ab1", "comment": "Malware payload (Mirai)", "value": "8147238fe17fde2336df7f7788ecb84a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "050e94fe-671d-4988-9b5a-07a3a53e514a", "comment": "Malware payload (Mirai)", "value": "d8ab6e667c653c35f3903a4ec4cf9c17ea02fc414a1c15b20ed5ab8ead087677", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "bcbc9521-c37c-4c73-a22a-f62cdd8180c6", "value": "T1AB34E791A4119ADFCE0158FA73AC4F342B817C74861B1FBD5D559898A28F8DFF0C6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "da5ab8e3-a4cc-40b7-8aa9-5314b017d34f", "value": "3072:EcXtMBlDxZ+eWprFHXrzEz5uc/6WSU91ifhBDL665Wv7uaby:Ec9olDU3rzCfCWB9MfhZBkvXby", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776487393, "uuid": "e488f237-6fb1-40e8-bc17-a10ebb6e4f27", "value": 251268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "36c29b2d-cebf-4567-9439-360458362e28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c048e78-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776487393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "8fc4008d-9453-4764-9f76-370171966c97", "comment": "Malware payload (Mirai)", "value": "440e7f95dda2d0a163b4de3c360e2807", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "27cdf3ef-b8e6-40b1-8d36-d09df50d5251", "comment": "Malware payload (Mirai)", "value": "860eab8489d0139539933d10fa8aaded473de4fcf8a61fda1fb6713913763f59", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "8246f10a-d98f-4bad-9970-8f2c0c1de358", "value": "T183243BA3FD01DE7FF80FE3B284530C19B230FB6129521A3661A3BE9799350D56963E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "3c760d23-3888-4f72-a557-1b9dadae3beb", "value": "3072:IobiGL5gdy6HiBh18Cu4KOg1K0gyyX8G8kRGexrjvOF2VOVIjbi8LIoeJHq2:rWHi318vDNzyXV8kweJY2VXLI62", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776487393, "uuid": "2c27e09d-08d1-4e45-a486-fea5e9a0976e", "value": 219892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "559856c8-3818-47fd-9b80-038482904d93", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c091da8-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776487393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "792eff08-026f-41ba-8dff-f14075a4bb3c", "comment": "Malware payload (Mirai)", "value": "ef06bc022916f2b4ecd83ba4b1ec0038", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "1ed3a9fb-7faa-41b6-80ae-3597d3dfcfa9", "comment": "Malware payload (Mirai)", "value": "a4bbc410fc3752c682361c797e006a1a35ee6feb0f8a1d6a9d451482e1346c51", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "525c558a-c1c0-442c-b9a7-f2d26bb30211", "value": "T193246B43BB868FA3C225BA7449F386785AD92B0B0AB3C4D7C3755B0167655A03C2DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "9f54b4fe-4e4d-45ca-93fa-bdc52c7f0cff", "value": "3072:7gw1q0oExAqvBbjAJibafBCJN5UGZAjY6116IahgdzM+w1qgCK95F2MWoVj0Y6+:h1qlE/BbjAJi3JPUahgdrwUWrh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776487393, "uuid": "56188d4c-1943-4cd4-a4da-d9eda0ac4e1f", "value": 218160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487393, "uuid": "72f9d546-b920-44cb-a5ba-790de1386c16", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38853815-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776487441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487441, "uuid": "7d3dac68-78f9-40b1-942b-27c63cf717d4", "comment": "Malware payload", "value": "6e4f419524787b0f62a653e4f5418f3e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487441, "uuid": "5581807b-a8f3-4046-99a1-56602e958f7e", "comment": "Malware payload", "value": "f4455d06d542bf44b2e4beb554e1e6ccfc2e736cb742e640e32b2abde433c6a1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487441, "uuid": "7c3724d1-1734-4de5-8c7e-d2799aa0c78d", "value": "T1FB931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487441, "uuid": "a363ec80-8af5-4cfb-8f23-811eb28af939", "value": "1536:nByp1tF/uwMmAIa14oXoKIMepeV7tb73WdxCrCitkb5fv2v05xLkrJKMD0sCxK7G:n8iIL0GitkbFv2v05xLkrf0sCxIoIy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776487441, "uuid": "6e54ac8d-d775-4ccc-889f-2bf5f7fe0e8d", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487441, "uuid": "ba5e45c3-81b8-4374-9ec7-3212665edb41", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f64e198-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776487506, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487506, "uuid": "3055e416-776a-4d1c-9ccc-68e59da5adea", "comment": "Malware payload", "value": "d4cb9422bf965b67f9127d8b227651a9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487506, "uuid": "8081a92d-3762-4a7c-ae50-329bb3d36fc2", "comment": "Malware payload", "value": "70c10a9c0127d4b6e3d77874f7ecdd62b066557122b8a42305aa3ad635d88e85", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487506, "uuid": "76ab255b-e932-4915-a637-775f065767d7", "value": "T12693E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB32", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487506, "uuid": "ab2df65b-b178-410a-a10e-a83b22a363bc", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXrIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYP6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776487506, "uuid": "702ce1d4-0fc7-4563-b601-339f46e6e2e8", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487506, "uuid": "0ff48c3b-b7b7-4ff8-acf1-2549c2ce6294", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "723a8ac1-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776487538, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487538, "uuid": "fd825462-a768-424d-8bfd-294b2b7892c6", "comment": "Malware payload", "value": "6838f7a4422bcad961e0693ce26a2a2c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487538, "uuid": "d9c9a433-e83f-477f-bafb-f02e92a8c081", "comment": "Malware payload", "value": "b15ef0deefd7c69595d737cb3a55fc58af8ffb5d500224655790529e892b3f23", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487538, "uuid": "24924357-e58c-46b9-84fb-9d1df6473822", "value": "T1D78309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487538, "uuid": "d8a6bcee-8f94-444d-a958-0fffacf2744f", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnxWaDVN/:XEKltp9txAX/yr2pbxWqVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776487538, "uuid": "a3c280ea-bf62-4783-9b07-2600328d25c7", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487538, "uuid": "70b86037-3078-42ea-abd4-caa32ccb28df", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83465ca8-ba40-11f0-b161-82aee05be84a", "comment": "Malware payload (DarkSideRAT)", "timestamp": 1776489298, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776489298, "uuid": "e0f115b3-0110-46ec-a6d9-48170f62f080", "comment": "Malware payload (DarkSideRAT)", "value": "416275bb02a22efbf68717c00046dee3", "object_relation": "md5", "Tag": [ { "name": "DarkSideRAT", "colour": "#4f60a3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "txt-to-exe", "colour": "#aa5c02", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776489298, "uuid": "dc94702f-ac56-4ba5-ace8-490069b6b544", "comment": "Malware payload (DarkSideRAT)", "value": "f63ee52cf8bc3a075eddddeaa198ddb3bff5adf3da41dcc68f28a4e1ca2cd506", "object_relation": "sha256", "Tag": [ { "name": "DarkSideRAT", "colour": "#4f60a3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "txt-to-exe", "colour": "#aa5c02", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776489298, "uuid": "bd830b11-d25d-4274-8537-6fab7baf5bf3", "value": "T1E8832A35CAAEB07ED3299A78DD020D95CF63BC8A0794BF9753E10DE60F96A501F2C5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776489298, "uuid": "e8e11c69-43a4-45a5-8a99-3049cf417dc5", "value": "13202ae6e20dc0e6f8ae3713ee808076", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776489298, "uuid": "8e881db9-bb13-4f91-80f0-726b9bf8f0da", "value": "1536:+KJry/hjDGlrjeNHK3xnmF/MbA9mFYVM0:BW/hDGl/eZblyAM+VM0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776489298, "uuid": "a25f6506-a9ac-430f-9390-6af1e9f2cc70", "value": 80896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776489298, "uuid": "a8789501-bfbd-405f-b2d4-bc790b9a509e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47b2cfaf-3ae6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776489614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776489614, "uuid": "22767020-413c-4ed5-ae3b-845d5a630900", "comment": "Malware payload (Mirai)", "value": "0ee5e61ee1bd87fbf45fbcfe9b5a04f6", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776489614, "uuid": "7a16d1bb-cab8-4b07-bd26-c5e19e3fedd0", "comment": "Malware payload (Mirai)", "value": "cc105f72dca0ce157c3f5cffeaf4b5cf981fccf71dee6c469127649768ffeca2", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776489614, "uuid": "6490fbcb-e045-4bd3-95fe-96d0a49e50a8", "value": "T160C2E06350B5CE03C8F3837B6A3D5AA722605435A35EED2D73A94BC833460D4657AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776489614, "uuid": "ccc10379-a22c-4afc-8b25-79b6616dabc4", "value": "768:t5+Kcrb9VDJee2KTgdTHOBcK5ZCAy7siK4:Olrb9veKTg9QB5VTS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776489614, "uuid": "c4187603-6c1c-489f-a10e-bf63bd5e3f93", "value": 27712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776489614, "uuid": "411a763c-59f6-4c86-be82-0c27c586873b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b45fc51a-3ae9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776491085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776491085, "uuid": "f6ae5234-6a78-4904-975a-9a99256cb51c", "comment": "Malware payload", "value": "9db2aab22fa66658d4a95589b9857520", "object_relation": "md5", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776491085, "uuid": "18dcec18-cd1f-4989-90f7-1037bdadb823", "comment": "Malware payload", "value": "87531da5aad38fa06f874fd79b61393d9a93d717ead7bba9a5b4350f8b37fd98", "object_relation": "sha256", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776491085, "uuid": "4240eece-eef2-46dd-996a-8ee010b264e0", "value": "T1B1B423CED64115A9F1BE86312FEAC79403BB434F0BD200D9B68D8DDD714EE6560686", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776491085, "uuid": "81ef4dae-a461-40b3-8fc0-64f25854a125", "value": "12288:ou2URtkyTXh0po2NhtX8E7l36UE7VqsJVO0:ountzhZOts+36Uq3m0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776491085, "uuid": "f95b173c-1b3e-4081-a016-772b34feb151", "value": 493792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776491085, "uuid": "14c524e9-1625-45bb-97cd-e84904149f73", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba1f63ba-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776491953, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776491953, "uuid": "2503c928-25a9-411f-9b45-b933a507a95b", "comment": "Malware payload (Mirai)", "value": "d6a691e21ef8e707cbed52580f57e0f3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776491953, "uuid": "1626c1e8-39ff-481a-89d9-5b189a67d944", "comment": "Malware payload (Mirai)", "value": "aafe966acd67a746027f1a5ac41b6da478da30c0de165ba85fabaea94ad39f21", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776491953, "uuid": "530a6a1f-bf92-436b-89de-3cc9b17b5f1e", "value": "T10492C06F946090C0D5619437E6F8CACBA2BA1BFDE3E430A103A99A2CF76168427750", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776491953, "uuid": "29080ba3-c4d8-4f3a-b835-fc797f012757", "value": "384:v3CFDQy54M7zLnmZFiPThj6r8CKozfdchYC+Gyx2QSHWD4szZE53hymdGUop5hts:/CmyqM7zLnmZQLh+IWfdzFG/QPDJzZEr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776491953, "uuid": "4c3bd043-4beb-465d-baf0-5b27bb3a5ac4", "value": 20524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776491953, "uuid": "faf95472-1dc7-4d62-b671-f0a41e7645cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba25908b-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776491953, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776491953, "uuid": "d4681cf2-0601-4245-9f10-de4546413ef9", "comment": "Malware payload (Mirai)", "value": "a30ffefa8f87b0362058a2141fb26ffa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776491953, "uuid": "10aba145-e03d-4585-8d3a-742f60f7b619", "comment": "Malware payload (Mirai)", "value": "52f03690d6310989c61e729a9ece751827c1f334b09f6131740e68b1c0b03d3d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776491953, "uuid": "d4740382-cb55-4d01-b5c2-b76c6f72d355", "value": "T10A734B31F9390927C0D4917A61F74723B5F297CA20A8861F3E720F9DBF615403A57A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776491953, "uuid": "9f438ca8-9754-4e44-b5dd-0e63764dd133", "value": "1536:U2kN6QCXbqt5guvvF7tR7SYm5BHxS1H1tTxfT:HhilL7SYOBR2xfT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776491953, "uuid": "30640a59-37e4-4c42-93ba-3becd889e5ea", "value": 80032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776491953, "uuid": "900d2072-8d35-423d-8562-935ab463d638", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc4a0e95-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776492011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492011, "uuid": "91c2d6aa-cccc-4b80-b689-6011c294d238", "comment": "Malware payload (Mirai)", "value": "1339eab3adda27f2ed53217e7ce242ee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492011, "uuid": "d0ef6d92-f286-4f42-9147-402eaa57c6f4", "comment": "Malware payload (Mirai)", "value": "7ef1aad978f81b91405e4a0001089edea23a17f6acddcc62abc7edd136d97657", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492011, "uuid": "c3889e3d-e99a-4be9-92f3-790471c02a0d", "value": "T18DF2F0702745B8A2C9605AB7FAF2CB46F35A9378D0FE306912050A54E8E162358FA3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492011, "uuid": "7c6a187d-53ea-423c-ad17-1c5c24e27925", "value": "768:EJTKmOVP3WWkPgb7lPBIqxwQEECBah3zGKpZhRrjcs3Uoz9:EAmO4POPN5Evo3FpPdjZz9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776492011, "uuid": "384f306c-a3e1-415f-b166-6712aaf8ea48", "value": 36832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492011, "uuid": "54977d92-2349-46e4-b06f-85923183f710", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc4afca9-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776492011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492011, "uuid": "34f73e47-40d5-4fa0-be01-4f8c0e919299", "comment": "Malware payload (Mirai)", "value": "3e5ac61a12c48edbe5201909cdf45ae5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492011, "uuid": "2a01923b-6701-4457-b590-928dd8e9ca37", "comment": "Malware payload (Mirai)", "value": "8573dd1da2c11b7cdaedd9865cbbf863d45b8492f305afe489752fd3e67b91e6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492011, "uuid": "839b160f-04f0-4aba-aaad-15148d4c8c82", "value": "T1AEF2F1AB4AEBF37DF8815B764C19BAD8A9A7A5C76C480B9F4054335D04B37682901F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492011, "uuid": "9dd12e2d-6a85-4834-9fb7-1d4f4f55ac71", "value": "768:nkjvsa/voIruB2NUJfVB5F7n/gcGgg8cFY6BiziJ3ew1hf5eHgaBXcDP8Ux0nZ1:uzHzxUrBPnJ7lAukCpBXcpMZ1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776492011, "uuid": "82fe8bcc-fd02-4e95-86c7-39f979cc95bb", "value": 36924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492011, "uuid": "626e0f30-926b-4449-8eca-4342b3f96944", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc57db12-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776492011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492011, "uuid": "4c10ba94-3313-4e53-94a3-3bd15baa9d82", "comment": "Malware payload (Mirai)", "value": "367947179ff967359c6e18aae00ce643", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492011, "uuid": "213839ef-a34b-4fd8-ab7a-94ba3c8116ca", "comment": "Malware payload (Mirai)", "value": "c6329b749ab154317bb8171e30801d065ff1f0d95cf043c97e744f79a8304bb9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492011, "uuid": "a1b838f7-0571-4b33-b999-d24e0d56a6b0", "value": "T13603E0D959D22488CF9C1CF6A5BE02B20F8060DDBA757BCC371A1CCC767258BBA594", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492011, "uuid": "b4728964-59aa-4b2b-b771-e4ad1026829e", "value": "768:KhpGLq2YEQh5q10MxYWt/y/1tgPUcDpxz6TtYYWBbWx:epD2Ynjq10Qt/U89XziWe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776492011, "uuid": "9f1b6fdf-41e7-4f79-979e-95200b3014f7", "value": 38648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492011, "uuid": "e27b6bef-5d6a-4c39-a05a-13ca557f827e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddbd2dda-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776492013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492013, "uuid": "1d9018c8-34b0-4f9a-bb28-1a64effecf65", "comment": "Malware payload (Mirai)", "value": "7746c71008778ad06c2b88d42393c370", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492013, "uuid": "07a7e155-b168-449e-90af-a464b17a635a", "comment": "Malware payload (Mirai)", "value": "82b1fe5b666fe6065a799efec04440be43db390c774bc3d3530a7c005a6d8399", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492013, "uuid": "00686ad5-3f2b-4ec2-a26a-f020d08bd0a6", "value": "T1A903F166B9300D59DA6CD07C0FA80B215EA84FA194524C6679D3E753DFE30B2348AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492013, "uuid": "cfb790c1-16be-4063-885a-0ca51cab3a5d", "value": "768:hyI187beFSc+RX4qCw7kwGDGRfHBRRZfOJgGlzDpbuR1J6:hyf7beMbIqCw7jcGXR7f6VJuY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776492013, "uuid": "869ae4f3-57d1-4127-8f8a-cf410d3d501f", "value": 38124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492013, "uuid": "18baa347-d150-4fef-900c-0a518108c218", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dde5a24d-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776492013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492013, "uuid": "cbc38a00-7458-4d58-aee2-2652c05f472e", "comment": "Malware payload (Mirai)", "value": "630dd3f555b4a35ce2548489b0d86006", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492013, "uuid": "d368059e-89e9-46d9-ade2-b11d5e21a70d", "comment": "Malware payload (Mirai)", "value": "9ba93ebeb6d121165b3a121d8936196fd85cc9d1224b13b8c9ac9d7c7742c29e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492013, "uuid": "52947916-a519-4bf8-bf63-0ed459ffc4ed", "value": "T150F2E042C98D420FE07F15769CAEF24D0641EB5CB9C0B89789E1B07B5C02B0D6E5DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492013, "uuid": "2e5aceab-ae18-42cc-98f9-1102a7d1ead4", "value": "768:1zbGjwng3vdO5994SKAT1M1bVnykwtYcCrV5cWRsdHnbcuyD7UHQRj3:hdnA4994SuTykwKcURRsdHnouy8Hyb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776492013, "uuid": "9e67ba92-eb97-420c-aefe-b1813a48d0e9", "value": 34888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492013, "uuid": "464ae7cd-9d4b-409d-bc5b-718603430ccc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddf17be9-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776492014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492014, "uuid": "c81453c4-804f-4ce1-bcb6-33f3816f57a7", "comment": "Malware payload (Mirai)", "value": "94c52d11f1d088a8765c95058c37c74a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492014, "uuid": "5dde3fa0-6873-4688-bb2f-df2f8ea291db", "comment": "Malware payload (Mirai)", "value": "39460376c03cc7ebee2da8087a458116b548eef54ef317e2b583e86dea62a7e7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492014, "uuid": "af8b7872-595d-46cf-a529-b04326996752", "value": "T1B85302D2A440D1E7C35A02FF66E4D847FB655ABC65D930AB367EC318A192C4838D7F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492014, "uuid": "8f5e10f5-7132-4420-87fb-ad49a0a9bb63", "value": "1536:pVQSmwtMJXmejtKchLTM5Tfv83KJ2crl2EW1:pVywt8XZjhLgTX83KHl2EW1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776492014, "uuid": "cbdbf27b-a8e6-42fc-b5b1-38d836055b39", "value": 61844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492014, "uuid": "d536fcea-ba6e-4434-a64b-6a4e70be1198", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddf3636c-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776492014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492014, "uuid": "afe2fb2f-50dd-45f8-98f6-d0d6cdc9d300", "comment": "Malware payload (Mirai)", "value": "7cf638d9c8d6da5019e93cdf8796a001", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492014, "uuid": "3f27c83b-3eef-4994-85f0-b098e236ca0a", "comment": "Malware payload (Mirai)", "value": "604febb6e1dc95bd349c839c53bcb2a2a1e809234e763754f7d98efe68518a35", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492014, "uuid": "ceb445a0-f4db-4e20-80c9-c3b8e8faa1bf", "value": "T16EB3AEEBF64715A2C85243F013C79F8E3E232390AE57A4E76D1E267B15760DB1D06B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492014, "uuid": "f370eb3b-26cf-4a0e-9f88-6577a5016026", "value": "1536:pkA9afIgfNMW3zC8aRGGTtJM/qrlpmxJ6nDgJh/LWW:6fIw3e8ZE3MYlphDgJhq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776492014, "uuid": "c5e0c61b-6da4-4316-b5d1-7a4f295c48d2", "value": 115992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492014, "uuid": "146ac101-44ff-4a19-a6cf-785a45a89fc5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de0773f7-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776492014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492014, "uuid": "57655676-f205-461b-af4b-53e687f3f1d3", "comment": "Malware payload (Mirai)", "value": "763ac1e632a735198afd162c6b4b502a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492014, "uuid": "caa5dc1d-c462-4687-8f2e-3239fbfd73b1", "comment": "Malware payload (Mirai)", "value": "b730ca6a1a0eb87f83ecf35cad27bbc0227f2f4eccf7be314e5a1f602161e617", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492014, "uuid": "b5fd77d6-149d-42f7-9dab-4e755c1c8dec", "value": "T111639E16D82109A9C28685B471ECCE3A1B13E5C063837EF71A7AC375A067D9CF849F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492014, "uuid": "b9302990-4a7b-4b15-afc2-967b34906e8d", "value": "1536:daT/uMkOtg9iYv2ZKsT5Z7BPxznCI0sCp8udw:dWVkwgAYugsz9xznsxrdw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776492014, "uuid": "a5558270-a49d-43f6-af5c-53fb27534a4c", "value": 67252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492014, "uuid": "2fa7b6a7-84da-4547-be76-bc41fa1b1a98", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de0d4219-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776492014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492014, "uuid": "e596f0bc-a785-4f4e-9dad-912e2a2b9a4e", "comment": "Malware payload (Mirai)", "value": "9b25d35c6d86fd1fe366211cfdf434aa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492014, "uuid": "027812d2-a662-406b-800b-49ca0ebd5e98", "comment": "Malware payload (Mirai)", "value": "835a789b26d795802a79a54e9dff270a7964d8effdc045f6cd739d7982db8671", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492014, "uuid": "5375c203-987a-4e02-a1a9-28f5d3f3f8fe", "value": "T10183188BF801DD7EF80FD6B74463490EB930E3910A931A377767BD93AC721A54826E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492014, "uuid": "2dd33637-4bb9-4af3-a1c9-d6cd7c89dbf1", "value": "1536:XQOjxmw2V2xAYV8aSlslcjYAht8f489k0rTUhrIpu1HT7ot4O9I/nPaPD:XQO4QEpdht8fsnrCupQ9I/PaPD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776492014, "uuid": "1bbe8e56-ba54-4162-bcff-62028ba8ef0d", "value": 84956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492014, "uuid": "a1bed9fd-49d4-4e7c-907d-8eeac30dd1f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de111512-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776492014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492014, "uuid": "ca91ba86-9833-455f-90e6-884df5346fa2", "comment": "Malware payload (Mirai)", "value": "6b66f93ff2c5d7c344968cb947aab735", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492014, "uuid": "4477c6b8-7ad0-41dd-a455-d169a0c6f2b3", "comment": "Malware payload (Mirai)", "value": "dc1a24392b265827aa2b6c10bcf9471c2c0a0c36fd0c6e4843652f0d183256b1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492014, "uuid": "6cb28680-9230-4fcb-95ec-9186d4741a60", "value": "T1CEF2F146F5EDD740DCED89384CEDB8090C11932D9AA8D4FB9B89793C2DF4F4626284", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492014, "uuid": "e91cd01a-5098-4bdf-9088-c2adfff36c9a", "value": "768:3j9JFwkShNFPuB87BgQXD8X8YSpJrA+MAvReT0adLyqGKNnbcuyD7UHQRjF:35wkQvDUn0rAywT0ad+yNnouy8Hyx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776492014, "uuid": "a6022a04-d0be-4ed3-be58-781b1bf905c4", "value": 35940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492014, "uuid": "6fcd5a9d-92ad-4eab-bafc-5320606fb6f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de17229f-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776492014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492014, "uuid": "d0c06d76-4ba7-4a0e-b39c-f518a596f6ce", "comment": "Malware payload (Mirai)", "value": "15d46c55c5d7bc69a856ef25d5f24447", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492014, "uuid": "a038eb3b-2201-4ded-ac30-2a91dfe95e7d", "comment": "Malware payload (Mirai)", "value": "12d6c9ab00d60aa843f9513428257da8d1c0c4678349069712ceef42f1ecdbe9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492014, "uuid": "af494bfa-8c67-4e0a-acbf-429a36bb0d39", "value": "T1B1F2E160F6502889EEAD19391CD5D6C977E18FBA33586FF229C15F02180DC2AE892D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492014, "uuid": "72baae97-571d-4d97-9490-08b305dc1338", "value": "768:b7160aX0xrq5uHZEUZxhIvTyWKeB/SqkIB4cpw4uVcqgw09q:b7160akRou5EoxqyChNtB4cpw4u+qgwj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776492014, "uuid": "16cbead1-b3e5-4a8c-8031-450fa1072aee", "value": 35100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492014, "uuid": "f2c1483a-ee98-4d63-b787-4cb28db0cbe7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df1ffb83-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776492016, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492016, "uuid": "54ce4109-62ec-4725-9673-4057e11b85c3", "comment": "Malware payload (Mirai)", "value": "5215da95356dde636bcc36342b0fe542", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492016, "uuid": "baaf460f-ccfa-4128-a4fb-7ec4643029d4", "comment": "Malware payload (Mirai)", "value": "62b40ad07d7aaf24f1670a5d8f88ad179c426cd0c659ddec616fc03030e646e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492016, "uuid": "543a0d6a-2684-4905-9bfd-95d2429091cf", "value": "T1AA03F1BC214DC126DD216C77DEB207C26EA84B70D1D79006DD6B86AC8767788F6893", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492016, "uuid": "ce54b77a-ffb6-43f4-886a-83a339ffd30c", "value": "768:xGPjXBOTsh1aqh3kosh+IkLpFw71qB7IuszFKwMKBJjrYM9q3UELyG:0LYptVh0whqFIlQ/kULJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776492016, "uuid": "343fb120-b545-49f1-9e68-d4ce24c0cd3e", "value": 40340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492016, "uuid": "4ce1e3ab-88ab-4e50-8629-83af10ddfebd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed1ef595-3aee-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776493328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493328, "uuid": "8c049c47-ea67-45af-979f-3910c059d871", "comment": "Malware payload (Mirai)", "value": "e279329aa83c61c79e1c16209d3a5d14", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493328, "uuid": "b2b6a5d4-7eed-4b4b-bb7c-c295956ee22f", "comment": "Malware payload (Mirai)", "value": "20dab8f45c894c09b7f9c8dc834e9db2138e77f46d7ff7acc0173be9b954d3b2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493328, "uuid": "7c9b9bfb-ed52-471a-af91-0be4820d3e67", "value": "T156B2DF3471E9A0F0CD316035F87DC987ABDA41FD90FD3722216660E85E9A98D29EC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493328, "uuid": "c04882f3-e79d-47be-82ad-ffc90e6e34fa", "value": "384:joBE5aNSS75BOI+ypZ5vTlYIwcvsdTf5MF1iAUgefoeDYbZXGcH1/CDhymdGUopb:7aNSq5sOHpTqncvsdDePiAUgefoeDeXB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776493328, "uuid": "96789b5e-30d7-461b-bb7d-b0b10eed66e6", "value": 23728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493328, "uuid": "3ccc3cf3-1b04-4942-b586-34c6bb7f5881", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0fc46e90-3aef-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776493386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493386, "uuid": "7735256c-7412-42a6-a0f5-acb7e477670f", "comment": "Malware payload (Mirai)", "value": "8118aa70c1de6f78e16026854af581f8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493386, "uuid": "c37cfc87-7719-4f0b-bcf5-1f3c672382bd", "comment": "Malware payload (Mirai)", "value": "271df5ed45bb9b7d1ce8836dd0dae06861cf9eac654e5c3adaf27f79390a7072", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493386, "uuid": "47686d68-e6f6-4db6-80c4-4e4efc8f41c3", "value": "T15B732A26B97A1E26C0D4B57E60FB8B11F5E1278E26B4C50A7D720E5EEF147006502E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493386, "uuid": "c35ad1eb-6e1e-4fae-8b95-808bf9dd707b", "value": "1536:hD/B6f6UD5hAS7mo0DCCAXpSKV6v3G78nN9WN:927jqCt8v3GI/G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776493386, "uuid": "3d4e78cb-afa8-4173-8723-2191e5059664", "value": 74752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493386, "uuid": "1ea0ce96-3dec-4b50-81f8-f51522a28ccc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1432d2a7-3aef-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776493393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "c7a10e38-e9e6-458c-8972-8f02830e112e", "comment": "Malware payload (Mirai)", "value": "7e0128b683969eb4425ddcdffcdf8820", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "7195f2c7-f22d-4eab-8388-2c83d5143e0b", "comment": "Malware payload (Mirai)", "value": "87b4da6325c09742e72874166442dca4c4b4d84c7bde546259a2f7ebecb0b521", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "c647608c-5837-4f9a-83dc-45bc606da5ad", "value": "T1D2D2D0BC6B1149D6CA6FE0B44EE507222E60CFB2F1436C077665D5C3BB0A8583CAAD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "da48c21f-2173-460d-be77-20a20bc2364d", "value": "768:U4ylAtv6pqLJM0RXaxGyUbXtheU/S4uhJgGlzDpbuR1Jg:HMBqTRXa+Zhr/8VJu6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776493393, "uuid": "5a5c92d0-7f7d-45d3-a8db-139c3b9cb2b3", "value": 28876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "3c87f620-142d-4f96-9b66-1aebf114e51a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1432eb43-3aef-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776493393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "e856f5e6-a8f4-4dcc-a911-38bec01f8e82", "comment": "Malware payload (Mirai)", "value": "4f0cf57d9a63ebb6d765366f93d95ec6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "c7951551-8d48-4392-923e-927f0e4189b5", "comment": "Malware payload (Mirai)", "value": "90324772fa25816cc396637b1f7e185f8912a4b037cf4710c3fca46576a5fb1a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "760bc89f-2261-421b-9a6c-2df42249a9b9", "value": "T12AD2D1ADE5B442C6FD4E0C3DC4CC3BA10E19A581231BDB9667218C8D5B36C9BF17A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "a4bb0eaf-22f9-407e-894a-5e3addfe1f00", "value": "384:i8pVWtmRsLYEpB6V8S628FuRUuNJG9whQ3Cfbo6w+K95orj26G08MCRWGVCz0NvJ:HMYHb62x4ahQ3CfdwLjdT087Wc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776493393, "uuid": "ffdac43b-6ab4-45c0-b998-53adddf1ff51", "value": 29944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "0a75c07b-bcdc-4d56-888b-8ed3309c0faf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14368550-3aef-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776493393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "ecf454a1-a6b9-4ba1-8257-8c0bc22c40e9", "comment": "Malware payload (Mirai)", "value": "692d83cdd605937639dba494bc701bc9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "d70066c7-f719-4db6-aedd-9a68a0562b0f", "comment": "Malware payload (Mirai)", "value": "97b7b4c456be48420e9bc9fc6c2d3d2ec86f4a73eae457a6ef11134ec446a42f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "e5594cac-9bf3-4dbb-82db-c39b02567624", "value": "T163330113B715FC62DE752C39A6FD4C8A3148066DE4DC9C2235C469B062C224BFBD55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "90f35cba-d58a-4a1b-98cc-a9808a4b6b8e", "value": "768:CfZYvZxNZ/SPjiUv0w0zyIvfgJy2LHRfbwG9q3UEL2qEK5J6OAsNTGjf2tl8XOYT:tPtQjiZVcykHRD0L15J6RN2tA5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776493393, "uuid": "c87676e9-f35e-4dda-8681-b8bae93e5d34", "value": 51432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "1e14bb60-5550-432b-960c-cf6f2bdeaeb8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "143d198c-3aef-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776493393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "95483591-1200-453e-9cda-1e9994f0fea1", "comment": "Malware payload (Mirai)", "value": "4f776ed88df59b6651f363e2fa29a831", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "51bd5377-419b-47f9-b39b-2c72aed25b14", "comment": "Malware payload (Mirai)", "value": "7c66410bef86d9f38cc0ab2607c84a12de0f5225d3fa6edecbea0c5c77bf6616", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "4b9cdb81-d8e2-4057-949e-8957241c0337", "value": "T160C2D1222AFF38B0C2A470BAFD78C9DB624F0FB925F15521365057A1CEE200352758", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "d393e694-4402-48b4-8ce2-41085123c4a9", "value": "768:AjKX9vt6GqA3Q0jzV7EUyUq9E/Ys3UozR:AjqtBqoB7EUBxlzR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776493393, "uuid": "e5fe7613-5ad4-4756-81a5-bab44acfa03f", "value": 27336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "d3a54da4-acf7-4929-afaf-8bf6eb5029a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "143d47dd-3aef-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776493393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "5f5acd12-6e73-42b4-97fe-9f0b42c1c697", "comment": "Malware payload (Mirai)", "value": "0bc30f1cf8152ae19c03f3b4faed18cd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "f4508ddd-2661-435c-93df-b1f3cff298d0", "comment": "Malware payload (Mirai)", "value": "d4caee185f73fb3fb15d7248db87db47998dbe6edcde4b6622b8cb1fabf30c98", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "12f5f3fd-f926-4a99-915e-1b2ee5758c2d", "value": "T1D2533B99F4029E3DF88FE9BA84160E05B93023D212931B2767ABFDE37D331659D12E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "61365cec-0b57-482b-8818-10f053bfb20a", "value": "768:me4gpsM204GEkRbjveXd/nQi122EQtBSv3gFHn1eu48B8vB6J7EzNfXQuJpoz8yU:mo3EkRbDmoiz6IFn1X48B2SEzNfAuJMU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776493393, "uuid": "e014c3bc-b9ac-4197-9bd9-a401af0d9677", "value": 65100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "dec6c265-29e7-435c-88b3-87dc4f527993", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "143dcc14-3aef-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776493393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "ff33da21-3d9c-44e2-98d9-4bf966581cab", "comment": "Malware payload (Mirai)", "value": "95d0b7a9a2be1773871104caae9404ce", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "edb24781-9455-46e1-b2a2-f1c650d2289c", "comment": "Malware payload (Mirai)", "value": "794639f0f4b89e1bcd618ff1d62de51ac69a3229cbcc73f27d044978759734b8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "25097384-b55e-49a4-b6ec-15d744d0c6e7", "value": "T15AC2E160F8C1B9F2DEFEED74885085C03BF21E4937E1CDC6204EEE525222D329A68A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "3d9c38e2-5b60-4f06-a233-4eb86dfd7898", "value": "768:7KnqLiChP7gI5gBZw+LajRvZ4uVcqgw09C:7KqL1h4Zwa6lZ4u+qgw09C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776493393, "uuid": "f7d119a9-4644-4e23-83b4-bf8d593112fc", "value": 26224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "1f79f367-1690-4e31-97c1-c4d34743f963", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "143e86ff-3aef-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776493393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "d67f5c0f-6e4a-4861-b3f6-1d27bca786d1", "comment": "Malware payload (Mirai)", "value": "bba5fd218d83001b8cdbd738221fc870", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "beb68a2c-1fcb-4fe0-98e9-816c3e8a93c0", "comment": "Malware payload (Mirai)", "value": "eafe14e9fda6171db41d7b6e78d905b82117c2de8a5bfe8889560132bf8dc9be", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "32032c9c-f81c-4539-9194-4572b17b1ea7", "value": "T136538D75D15DAEA8C0414AB4A9198E704F13E4C046733EFBEA9587A68443DBCF858F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "8f437f5c-0fc8-42a3-8520-5508b68497f7", "value": "1536:ragXV1f1Fl/wtknCPQauiufs3Ii3O/qyD6EZeCc:r57f1b/0QHf+Iey6EZe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776493393, "uuid": "a52f3020-3564-4d9e-8dc0-e652ecb04993", "value": 63480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "4b022a68-ca60-4b84-a2b8-084451497c52", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "143fec01-3aef-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776493393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "f7907679-d4e2-4774-bab8-1e95aa84132e", "comment": "Malware payload (Mirai)", "value": "5af7ed8b68c6ba0cd7f4efaed4f4c606", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "441e0953-2e30-4744-9063-d85e1bc1096c", "comment": "Malware payload (Mirai)", "value": "5d5077c72d638baa0a33a1cbb7fdb499d5c83e57483f9d8c880bdf17228643e7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "bbe84bb8-a01b-4d90-a78d-2e511f100805", "value": "T1A0E2E1D545B2A8B9CEB10D7AFC634B4E2529C6FD86FB11226BF4373417B099A4AB00", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "4b3f7388-8a0d-4a90-af12-78d4b6ac5cae", "value": "768:n8Lm6COq1fewdHy62pud4yNOYSOyB8Lrag9q3UELdU:8LJCmjpkcMKUepLO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776493393, "uuid": "b9d11923-ca2f-45b4-b87e-86831b44597e", "value": 31872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493393, "uuid": "9bdf33b8-1f74-4390-87f0-e25c273a7052", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "946b2ddf-3b04-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776502628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502628, "uuid": "de9014ad-c4a0-4298-9010-6d93d9de51a6", "comment": "Malware payload (Gafgyt)", "value": "40726e8d22620b73b39532f00a30b2d2", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502628, "uuid": "af8a57ec-beb9-4b16-b2bc-3adaf3404828", "comment": "Malware payload (Gafgyt)", "value": "739135066c762d50a9542ff91c094e7a53df452ad188821a34dc05b5c9c35f40", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502628, "uuid": "077e53f9-eb6e-4a6a-b5c4-a7a63faada7e", "value": "T1E43171C971A20851F8A0A916B27BA88435B696FE90EE9F59EDDE3C39C44CC48BC04E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502628, "uuid": "3c2f3238-1f62-4abd-b349-9e6d97390db6", "value": "48:gX3KjHXVQXPOXiXbCXaX+X2XS9XTCX+X1MXsBXDyZo4:gX3KjHXuXPOXiXOXaX+X2XS9XWX+X1MT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776502628, "uuid": "396bfd20-fd84-443b-88ca-460a237e4247", "value": 1630, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502628, "uuid": "a4c468bb-164d-4bc6-a953-90c4d03cb0cc", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94a286f3-3b04-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776502628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502628, "uuid": "8c8b497d-905a-4e7a-9d21-dec49c133d28", "comment": "Malware payload", "value": "908a5a1f7e2ccfbfb55e3d3f742c3d57", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502628, "uuid": "b6c91285-3b5f-4993-8911-ffbdec260bb2", "comment": "Malware payload", "value": "e794759fb9185c4bc5e4b095be3adbd41dc0c42661953bee49cdf259ad7f72c8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502628, "uuid": "9d13a6fd-0497-44d4-b293-f25a6582f587", "value": "T15F93079BA60D0BAFC65B4AB128A717F0CF6DF560019A51C6B50DEF8007F2D706863B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502628, "uuid": "55f35f08-a261-4382-9efb-166c56329528", "value": "1536:SQMZdaVuuma6rBIbRC0RpXeXRIrsVwegrHQgH75ewkXgm1jT2q2I/fjAoc:STZUVuuma6rBp0TXqVwegrrfkXgm9T2h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776502628, "uuid": "7f085da0-7c15-40e1-adb7-6febfdc63b08", "value": 97622, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502628, "uuid": "6f616e7c-60c4-4fee-aa46-7f573a745b65", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94b57ff4-3b04-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776502628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502628, "uuid": "64eb31bb-b6df-4782-abb3-3e0dc320024e", "comment": "Malware payload (Gafgyt)", "value": "c354b0c012ad5d28196be575ad662208", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502628, "uuid": "0b9c3311-87c6-4b3e-929d-0b6d7d45be56", "comment": "Malware payload (Gafgyt)", "value": "e9564236bdaac13cb38601b461a76c1b497ae21c85f524cd6f623587101b20e9", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502628, "uuid": "da10df4e-373e-40c3-8abd-645d8874c56f", "value": "T1F8D3966A3E21AFBED5F8877547F34AB0C384219226919B45E36CEE2C5F7168C084F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502628, "uuid": "c4e2f62a-322c-4d24-b312-8d7b2217626e", "value": "1536:T7jO1Tg6q+PMEkt2rKPzZpaOTqmCAje3QT3VBPJtMmi1fhWxS51Mlfc:CyVzqmCATrXPJtMmiBhWxS3Mlfc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776502628, "uuid": "783ff78b-ad41-4309-a789-4fb65889e18c", "value": 130541, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502628, "uuid": "1448f46d-b477-4edd-b259-1b015c9a350a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94b834bb-3b04-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776502628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502628, "uuid": "8b9ebfab-d846-4f6c-8c1b-cd4bf55c581b", "comment": "Malware payload", "value": "c187c14e46fe6d24ac802f8edc70a837", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502628, "uuid": "e9bf5deb-6842-4837-9011-bb8e1b13a8ed", "comment": "Malware payload", "value": "2f261e21db56fb984baeec70a48b820c3d8006bb6611888adabe9bbb7a4a3dbf", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502628, "uuid": "ee20cca9-e9b5-45c5-841d-18c97ef354e5", "value": "T1B6D3410BA761DEB7D85FCD7B069A451110CDA98A069DAF2F73B0CA1CE78E88B44D3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502628, "uuid": "055b96ed-32d1-4490-a506-5e496e612c44", "value": "1536:187eT3rdO7DirQtD4HBcZZM2MZB36KHBPok9XbA/Ok9/MMmi1fhWxS51Mlfc:yA6ccjVMGKZlIOk90MmiBhWxS3Mlfc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776502628, "uuid": "5ba448d0-7ecc-4fe0-b4c1-bb6713bdc1d0", "value": 130541, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502628, "uuid": "223a7d42-f93f-447b-82cc-d0b8a1371094", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94badd40-3b04-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776502628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502628, "uuid": "a321a945-f0da-4bfa-8a4b-8465dd5c523b", "comment": "Malware payload (Mirai)", "value": "1e97a975275763d314588b7f4a773178", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502628, "uuid": "8e490fe7-ecc3-47dd-ab16-56c118e771f9", "comment": "Malware payload (Mirai)", "value": "b040e1a6476b048f7521c9d194933341bdbb9a5dc71697820fa3df9dde6e6da9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502628, "uuid": "dda82cf1-f305-4c5f-9140-9ddf0c31a14c", "value": "T10693091F975581ABC89746B607CFF63A4C33B8362B65A1453386BD9C2F07ACC8D293", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502628, "uuid": "aef6133f-f186-4195-924b-25e2f32ff160", "value": "1536:E70qEo336pR+ABHnc+G4/CqaeFK7+VWOm5fUVs3/L53unXmSHsbOmIct90ymc:Kd3KL+UHnh/CqjWtJUC/l3uXmGsbOm/B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776502628, "uuid": "ae926048-c12a-4963-8c84-129a836dde88", "value": 94842, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502628, "uuid": "a3ba3b7b-3c19-4ec5-b212-c937763fcc4c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba24d6e9-3b04-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776502691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "14512984-14f8-4770-8e6e-00d27c45682e", "comment": "Malware payload (Mirai)", "value": "a33888d3a7bdfab9284fb9d25b13083a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "550aa4f8-132d-4e86-a013-07899f96e2a1", "comment": "Malware payload (Mirai)", "value": "1b2873d53d47eec40d887f257d1084199ef2df6f5bc54e1073c96e5a7b1df83c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "4c0af833-5afe-49e6-aacd-7a41e3c199b2", "value": "T1B38308925785C5F7D0431BB706975FB50B2AF83A0DBAEE41F36CBCB48A610A4713AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "69d4ba71-3cb7-4c3b-a533-91e4b0f80eb7", "value": "1536:eNXQrUwQvIfGAAz9vCd6aJxprGhVFBfxBq4rwmFHg2OZIf5jr8y:eNiU6eH9vS6ELrcLtUmtg2OZ85jr8y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776502691, "uuid": "82852744-d629-44f7-b5f6-b40d7366c30a", "value": 85363, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "64736553-e554-44e7-9d3b-06b785598ea5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba3fb79f-3b04-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776502691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "8d80b61b-63b5-47ee-8cd0-cbe3b459e61c", "comment": "Malware payload (Mirai)", "value": "94469023717b6d08036dabff9748f75b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "de677a9c-81e1-4f59-8c4b-e0a47f2c00d0", "comment": "Malware payload (Mirai)", "value": "ffc179f338f7546f7bd043de0cae339c21967ff779f09d506b86e06362886905", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "0ecdfc46-ec57-4700-b8d2-850a44ee07c9", "value": "T18EB3D501EC506733DAD22FBBF35A82CE773196D86B873381952D2AF05B85BE819791", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "49094505-5364-42d7-be8b-f2f40450e7c7", "value": "3072:nCwnryYPxkhJjh8hOVlMQaQg5huSHC/lOCaYejQAiSgcK+3Cgs+TMrPSbyCENvq9:1rxD5/H23m7nmQAEXxz+vc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776502691, "uuid": "fdadd9bf-5d2a-4792-be68-eb6cc006e57b", "value": 113332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "d38248bd-1544-4064-aaa4-6357dab6ff5a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba43c584-3b04-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776502691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "cd88afc4-afc4-45a7-acc2-d369e5e1492a", "comment": "Malware payload (Gafgyt)", "value": "15acc5c7be94f30c019d7d0673e3acdd", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "53226a7b-4e7a-4d21-8a7b-7d2fade5996a", "comment": "Malware payload (Gafgyt)", "value": "6cb4e6a744312cd67a9397badf246a8343c52fe4abd84467ca02c290ee9752d4", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "4fc18c7a-d129-4fab-8513-e85a4dfcb377", "value": "T1BCF30945EA906B33D1E23F7AF69A82CE7322479467973346852C6FF02BC5BE84D361", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "ac4f1520-ba89-46c7-958c-16cfdccb8ec1", "value": "3072:nhUY5EXPjqqmJEFBrFvY1P/atlb21hynoT6ovy+5DR1IAqd3DcpSwJ+RqvyiQUPw:nnfldHeajSniZyBkMMshQm7aBM/9mmTh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776502691, "uuid": "8df9693c-17d6-4cab-9695-01da3c675b30", "value": 166069, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "9adcc72f-2988-4b59-980b-c864c0cc34e8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba45e8ab-3b04-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776502691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "f1f01831-4337-43ca-a7a5-fcbb4de5186b", "comment": "Malware payload (Gafgyt)", "value": "cbfde00fca43e574f4d60ddaf866aee9", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "4f519506-c210-4d0e-bcb8-962a6c1ee93c", "comment": "Malware payload (Gafgyt)", "value": "cf4c18be5c3a6ea93ec7de77e15d41a089c41b8038c8525a44fda6c6bbecbbe7", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "3351561a-8498-41e3-bd2b-ae60be0ef47f", "value": "T174B3D73726270EA3C2C6247101DB633896BDDE94BDA90ED7F9817DD83F0AD8439592", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "17178144-cd60-4910-ba89-928422151ecc", "value": "1536:a1bvC6BnZIntcd6NM5GtXIY4UuVzMum1jTGq4Ic5jWnc:konekN8AIY7vum9TGq4/5jWnc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776502691, "uuid": "89613000-f7c5-484e-a4c8-ead8f14b5813", "value": 109892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "8f180829-3f2d-47b1-98b0-1b02c86e932f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba46ccc9-3b04-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776502691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "ada642cf-8e1e-45a6-9285-613b7870e881", "comment": "Malware payload", "value": "6cab33d43dce47eed3bb94515fd62873", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "f53f7ec4-df2d-4128-acf2-dfd00ce44e64", "comment": "Malware payload", "value": "a4ba25ffaf428e97a24ebe9cfe443263534cbb52887c423ed4cf676709b6ed35", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "173f38b3-c056-4030-890f-81cf64bddb24", "value": "T1F693F69BB61D1BAFC65B5AB128A717F0CF6DE460019A51C6B50DEF8003F29702863F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "9856cc8c-d5e7-4a24-83f3-0f4e4f6d1f73", "value": "1536:uQ81xCmJ6fWua/8/bReN6dGQUsg9IPUGGV5dRyDl481Ngm1jT2q2I/fjAoc:u71MmJ6fWua/8gNlLZIPUbyV1Ngm9T2h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776502691, "uuid": "a6cbf93c-31c9-49b6-bf2f-09049e164eb3", "value": 97622, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "d77a00d2-2166-4454-8762-e601d32a0674", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba4fd0d2-3b04-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776502691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "804c753f-2b22-447e-b2f9-75ac9fbf4863", "comment": "Malware payload (Mirai)", "value": "c799ec46ae930c437b2cf709de08a943", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "68be66a0-8d53-4dc0-b39c-86134165ccd4", "comment": "Malware payload (Mirai)", "value": "9682fd9745b7f47eec6ccd7329be56ff2b9cdf60c14eecc76b92b0b4ac02e69d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "ed23e4b6-67b3-4e19-a0ed-100d0c1421ab", "value": "T1F28309519A4AC5F7C8430BB70657AEB90B6DF8254DB9EE84F31CBCB49B624A4713E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "9295f287-80f8-45a9-ab08-d476d1cb625d", "value": "1536:VuyXScwTwIR2hWpsMDmGf+jsMV7gZczPumFHg2OZIf5jr8y:ZXStwI32MDmGfqz8ZXmtg2OZ85jr8y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776502691, "uuid": "0a0b81d2-bc88-45ac-b281-7d92f5f93e77", "value": 85363, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "edcffafe-6330-43ff-946f-656e9b6a178d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba57a31b-3b04-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776502691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "07f3cbf5-6d18-4ea3-9d5b-252a734e1cb1", "comment": "Malware payload", "value": "86372bb5e310764078d5ef4010093744", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "c86327e3-5f31-4b78-94dd-eeeed7b63f23", "comment": "Malware payload", "value": "63eab83b27473d16dbfec96f1d425076ff7a105d86983af5f679ed7dfd9340ef", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "675e9726-e631-403e-95c1-8386959ef411", "value": "T124A30AA2FD01EE66F00A9D3A07D707247633FB670F8229253267365ADAB52D4B517F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "c001c8b6-fbae-46d6-a929-ed9a129ab2e0", "value": "3072:SUH9wCtg+UBiMJdUyhgLAFm9T2q2/5jAoc:SIy+UBivyhOum9T2q2/5jAoc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776502691, "uuid": "e2c70c32-6d0a-480b-992a-f93e896e8cc7", "value": 105644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "437d3a62-cf84-4fbd-bd44-c0552d700fa9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba5cb3ca-3b04-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776502691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "8b7cb0da-50d2-4fbc-bd7e-5f81862b8b8e", "comment": "Malware payload (Gafgyt)", "value": "38492efd6a9d008c18c62d1f46513dae", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "6fb165cf-70d8-48ab-824b-08ba0be1dcc3", "comment": "Malware payload (Gafgyt)", "value": "15dd7f624978e4dd49fe4790e4411f2153bd71c7297a154ab430929630433b6e", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "6c989e77-e5bb-454e-bb6f-f2cd70c18113", "value": "T1DCC3D641D8A06733E1E22F7AF76A85CE73221BE867973352852C6EF55BC5BEC19390", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "404a169a-dd64-4e18-b713-a119a341ca07", "value": "3072:Hudb3Snhk2P7a3rcf5Oln043XNwsUgFyVAjomHDD3L/iqjZdqpYCzoRYF5sQe5j/:OzpWnaATWEpnQbvem5QO/H7pP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776502691, "uuid": "35cea1f0-56aa-4008-84d0-f472f9b044df", "value": 127956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "08c2d8c4-9749-48e8-aebe-5c822437cbd4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba6ff966-3b04-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776502691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "621e36ee-bef8-4018-9d5f-d24721cfed4d", "comment": "Malware payload", "value": "318ec46e5c3fb4ce110b19c5c7439646", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "654e69e6-66da-4fe4-9b9d-cff875e9406d", "comment": "Malware payload", "value": "b412d96f936a6c039e998ec0e6df526b0879abebcdd23f0948ddd58effb1ddbd", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "ea80f3e4-5038-44c5-b4e2-66a1a7041170", "value": "T1B0D46C627721DFB5D354C27009F3C6655AE521A20AE250CAB27CC72C7E6162D2D2FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "4c0a16c4-cfce-4c22-9cce-d7032b4cd565", "value": "12288:oH4O4DwKvC6Qq5RIZlnm6xLq6rHjpjBDPsBt8pwFj6LE:04O4DwECXORelnm65HjpBDPs9Go", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776502691, "uuid": "ee6d63a4-2471-4ea3-8464-b599a0aec149", "value": 637404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "08a218f2-876c-4922-aee5-7df0e8a95f9d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba776d35-3b04-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776502691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "d3b45a26-b7eb-400e-9a6b-3ae927552e8c", "comment": "Malware payload (Mirai)", "value": "825caf027236ff87dc4bb5ebb6aa76a9", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "744069fa-064e-4890-8f52-e50af3a8bfb8", "comment": "Malware payload (Mirai)", "value": "501a3926bf5424354cfd62842f224c741f4f75b3ffcbb21c4f8081f17b248da8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "0ea5e0dc-8535-4f3e-a61b-3a76765eb7ad", "value": "T1B6B42955F8809F61C6D539B6F74D82A873074B79D3EB72069A244B343BE786B0F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "38b10d5d-fc95-45dc-b08e-dffb6f57d0b9", "value": "12288:5DgV6ZEroebHKdCqMqDrJ1BFDTv778pBPE0:dgVr3bqdlMUrJ90", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776502691, "uuid": "e84733bf-a354-4ac8-bb42-6816274e9464", "value": 510352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502691, "uuid": "a6c11a99-e1f8-4b77-9898-ba696bdb8d1c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a462578b-3b08-11f1-bc00-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1776507319, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776507319, "uuid": "d7eb29cb-6d4b-4bbf-a770-e226d2857777", "comment": "Malware payload (NetSupport)", "value": "a863940a4c5308f5e7abf45d045bf27b", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776507319, "uuid": "d96879c5-7f05-48ac-a8ad-d17c9b5239ce", "comment": "Malware payload (NetSupport)", "value": "0db8b76f78d22a3c9787c53f4e03b830b1b9d9d43d723159eaf11dbbe244be59", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776507319, "uuid": "2f6003d9-ff6d-4636-a21a-8a3641e2f9d9", "value": "T105167D1FBDB95CA9C099B53488736606B964BC445B2227C71A70F6282F3B7F05EF9B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776507319, "uuid": "1f6cb519-7506-4315-abe4-08e1d7a86d60", "value": "3271ee162568f50a6810be9b8973807f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776507319, "uuid": "40406a4c-02d0-4624-a0f5-ce079e12a610", "value": "49152:7Kx2vl5ooDxsO90stBAdjrgwlph0AN+sSHSStT0Ea53AjbV8QclstDz:7K2RGscNmwEL/z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776507319, "uuid": "fd1087c2-a245-4fad-9e68-eba0c66cbd25", "value": 4355584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776507319, "uuid": "e5cf39ff-bb73-47f5-9fd5-736b30679354", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0220539-3b11-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776508231, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776508231, "uuid": "36fe9d42-1b6f-4b09-9d7a-1967aee30ed9", "comment": "Malware payload (Mirai)", "value": "91c6b678383cf92a818b3e08c1900ff9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776508231, "uuid": "58b039e3-5a16-4789-8ff2-5de217bcd8fb", "comment": "Malware payload (Mirai)", "value": "064fc04504e868ec0f453d426b77a25fdeaeda9abb9dc72ec5dcede19bdf157f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776508231, "uuid": "798c3170-b687-4da1-a211-ee5275daa451", "value": "T19A63017AD2DA2D80DB124F3204AE87CB872925FDB0DB36B250AE6495B5165F7320C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776508231, "uuid": "67b2d6a5-6064-4c95-ae34-16d5b71ca382", "value": "1536:EeoSvONpuv3PT8myJHE6V7EWRa/bqVr691uy+lNF3CLqcRez9:EXSWNsfPT8m2TDRa/Wrct+R3CTReR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776508231, "uuid": "39e974d6-4e74-4e73-b56f-74dc772ab364", "value": 70160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776508231, "uuid": "21ad5ff0-7daf-462b-a0e2-c7b8bd2e2adb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d438f0a2-3b12-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776508748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776508748, "uuid": "7beab86a-ddb4-43dc-8c57-846b35d2bd58", "comment": "Malware payload (Mirai)", "value": "309f170a2fc47bc8aad23f0a7a678b2f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776508748, "uuid": "02cf50b3-8c6d-4591-8163-77f679441b3e", "comment": "Malware payload (Mirai)", "value": "93fd5d044909555935ed9a14e895f470efa5ac1553365937d0486e063f0839cc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776508748, "uuid": "788f8a94-5ee4-4752-9203-0653fc7e11af", "value": "T1097302045744C2A8F32BCA7C1B952F9C663F4B7706071D2F22A8A6936F9D92578537", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776508748, "uuid": "7c2b8fe8-fb5f-40d8-a652-7ea1c6dbca07", "value": "1536:kdCTDABCJhDS056FRy9sOmaKGyvfbl8fY1y3kvjpnGzQiuTb7+j/ngjNg/YIFvh6:HT8whSiMwsOP2fbyg1xMhuT/+Dnq2Dve", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776508748, "uuid": "67491ef3-dcf9-4c97-b96a-af7aeef11b93", "value": 75156, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776508748, "uuid": "06ede137-d92c-4940-a984-8afaa85987ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b377c0f-3b13-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776508894, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776508894, "uuid": "75b55e2e-db54-4418-a837-943a580cb21f", "comment": "Malware payload", "value": "18639a0700fe1c30d036c63121c432b4", "object_relation": "md5", "Tag": [ { "name": "pw-update", "colour": "#10debc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776508894, "uuid": "a02582f0-1617-4d1a-a939-ca2a34df36aa", "comment": "Malware payload", "value": "56adfefef3f44d95277d09d00c2f47c93c572a3bb599d18e20d627501b90094d", "object_relation": "sha256", "Tag": [ { "name": "pw-update", "colour": "#10debc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776508894, "uuid": "d3f67eeb-2bf1-4787-847c-95e0568461d5", "value": "T1C6A733272E1AF2C6FCA42325F0127346C8FCB39779C285905C95596332AA757D9EEF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776508894, "uuid": "05323281-ca64-4ba5-b41b-7ceea65e611e", "value": "786432:p+yUs9gC6kXCJqd13OSn1GdWu0GUvhOrsAbohPJfqwn9SuOQ7YwuQtBA6X11t7V9:pUO9XCJ+3x1ajTUvhOPbohdWU9BA6X1n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776508894, "uuid": "89a4da08-30f7-4073-83f9-c20a4f5e4783", "value": 47860369, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776508894, "uuid": "8ab53009-2b3e-404d-a1d3-7368d4c7fee4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1776509019, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776509019, "uuid": "e4ad835c-ae72-47c8-b7ed-45e6f41c7bbe", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776509019, "uuid": "312cca3f-5477-4530-a103-eb1356d6d25e", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776509019, "uuid": "3d816db0-864b-4b66-8abb-e78d7159bae2", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776509019, "uuid": "9c18b5aa-cd58-4596-abe5-0fcc9793e9f7", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776509019, "uuid": "76172106-707b-4052-9a29-a104e875a801", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08e013bc-3b15-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776509695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776509695, "uuid": "fcc0c23a-cc78-4b5b-a68a-edfc3f2d9a30", "comment": "Malware payload (Mirai)", "value": "69aa46ddd0df01dccd9ca0419a577fcf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776509695, "uuid": "6fae124b-b75b-4de2-9b48-edbd6d4b21da", "comment": "Malware payload (Mirai)", "value": "bc0cb910005577e7c03e54c3330eb941224c795b4cbd9b1ae7efa9fc1c721893", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776509695, "uuid": "8fe40a9b-26d6-4638-97a8-0e1e7ceed7c7", "value": "T1207312DC60DACDD2BB0063BAEE7524CBB89753FA91FF353086D80A3997E6004A255C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776509695, "uuid": "e9c806c4-fd7d-4244-81ad-c1fd9193dd1a", "value": "1536:NzMd0CWDiYe4PhjzbPjYwjetnvzd9B46q1gxtF/eDTcVsDE5/LL9:qdCzxD8wjeBvzN4BQtVSs5TL9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776509695, "uuid": "a2488fb9-0a1d-48d3-ba4e-d468a9b262c3", "value": 74420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776509695, "uuid": "e894cb76-d5bf-4ff8-8ad6-119ead8c158c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa7af731-3b16-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776510396, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776510396, "uuid": "bb4d4c8d-4aae-4a43-858a-7116ad4ea178", "comment": "Malware payload", "value": "113962b1c331ef0759d432c8e2551b21", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776510396, "uuid": "6ba2c7ed-eafd-4b86-a07a-49f7f0877857", "comment": "Malware payload", "value": "338efbbd7a0d5f30a0bf37c47ade7039edf339d7c32a98d0ad9213adfa20bf3f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776510396, "uuid": "d00ca2af-1b47-43bc-91db-fd9ee3b8eddf", "value": "T16634CE0E196F35653A45762999DB2FE172BFB3022502A8EF29CCB875C504AF458CEF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776510396, "uuid": "a4f61278-4f03-4176-aae7-b00dcd56f6e7", "value": "6144:2leHQBvgPXECa32CjiA3i8fw8hHTrG2uvzs335N:uJNyXla32CjiOiL8hHTrK6L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776510396, "uuid": "dbb6c0f0-0c10-44c3-9b3e-f87c3dd1bb31", "value": 239680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776510396, "uuid": "69349903-d18a-4153-8580-3e5ded1acab9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bac667d-3b17-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776510585, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776510585, "uuid": "8f34d2d9-1084-4bdb-b144-1ec0c1bc567d", "comment": "Malware payload (Mirai)", "value": "81fcfd87e64cedacb49a108d1a07fabb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776510585, "uuid": "d1dccb41-32e8-4db8-b908-6cee444a0a1b", "comment": "Malware payload (Mirai)", "value": "16aca11323d8bb11a76352e9385a808925492c0e06d4fa9b240f4a130e1e85c3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776510585, "uuid": "11d795c0-176c-4dd8-accb-5ebc9c1c8b0c", "value": "T1F3F2F1B06E012C40CB7198B3D73A8B9F3CF24FFCE664763A45819E75258B76009F81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776510585, "uuid": "5d385395-b944-4ea3-890a-12d5aea7f057", "value": "768:82Be3pOEOANAc/HRfanFNhBRstOtg57c+cfRYOpqs3Uozis:8weX2mHInpBjtgW+UYOpnzis", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776510585, "uuid": "516ffa97-6643-4e40-a601-86203ead3e46", "value": 35916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776510585, "uuid": "7fd23726-a50a-446d-ba60-d1aeb3ae2bf4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a76a758b-3b17-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776510820, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776510820, "uuid": "6db21096-bc4c-41f4-8d6d-9b46a0dd24ec", "comment": "Malware payload (Mirai)", "value": "8f29fd50398bbbbc141c426fd706c64d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776510820, "uuid": "b33a790d-199d-41d3-9a7e-eaf30a7e9a57", "comment": "Malware payload (Mirai)", "value": "8ce0d00d3e6f03a3d44a605a331ada378787c2518e41945695494d0c84aa19ec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776510820, "uuid": "da6aeb09-0f17-471c-b462-02ca7744d846", "value": "T1AC931209E979922E9AB0E73B95B8C65EB31557838C9E6102373011C78DDF3253B65F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776510820, "uuid": "b71ea96e-9c30-4d14-833b-471bc2031669", "value": "1536:3QauNoOtWPA8Huu1qzHO6Og2w3v3KFJFgNLosCWZzHY6uFtzHC:3DOtWPAGuTzFz20/GPgNLosdVh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776510820, "uuid": "ad9fb1a4-66cc-4d08-9622-e6513c7226a1", "value": 89684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776510820, "uuid": "6342e0ff-af1c-4489-b079-c624d90f0009", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a889259-3b1a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776511979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776511979, "uuid": "4b2263e6-6b9a-4206-b19a-c4a59b601166", "comment": "Malware payload (Mirai)", "value": "4dfed1c7c30de9cc97932a6287e41007", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776511979, "uuid": "a942fe4d-cc1a-47c6-bad5-fe1ac1fcfc90", "comment": "Malware payload (Mirai)", "value": "303bf1629f8a98593d5b774c3e42e86ae2c68aa981066c4995fbb2870c004dd0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776511979, "uuid": "f69f3569-8b86-421b-af0f-8aa2ca7e2e00", "value": "T1FB049E32C429AEE8C1A49476F1B1DB7A1BA3B45041671FBF17EAC2794047E44F90A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776511979, "uuid": "84a18915-5435-4433-8d2a-3271534225c9", "value": "3072:mJTMjQax7jQmw87mugbFe8B72kwoBw5eN2K326PArsWmKppvWioT2mfu:mJTMjQax797wfEkfuDuo1+ixmW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776511979, "uuid": "18c1a274-de9b-4591-90a0-3730ae5091fb", "value": 176576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776511979, "uuid": "2c689640-3b29-46ab-9ab0-675e4eb447e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "661c2040-3b1a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776511999, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776511999, "uuid": "3d6d958e-edea-47ac-80c6-32f6d69fd4f9", "comment": "Malware payload", "value": "4d1e22acfb24a18def20b89a8423e996", "object_relation": "md5", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776511999, "uuid": "10304043-0d58-4c8b-8a36-3695ef8770f4", "comment": "Malware payload", "value": "8915095f81c7368bffbb595e0a771a70bd7e6245f2d1e4cc9db983bf493e4b4c", "object_relation": "sha256", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776511999, "uuid": "e5fa2e86-11e2-42b4-966d-bf2e585af8a9", "value": "T1AA663336F51D1DC9C82B98BF50A11BD4C3E6220FF447D43B62A176D4B6E5B8A08CE1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776511999, "uuid": "05c0ca55-9c5a-4007-b692-2cd48e13e6ac", "value": "196608:CXU8YYlbHXUZZftz5iqKpcXUS0uU+HB/OGUElHT:cU8YYlbEZBKqJUSrU+h/PUElz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776511999, "uuid": "b3ba79cc-8820-45e0-a48d-7370e4a147f8", "value": 6831546, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776511999, "uuid": "c27f254b-a084-4d26-a7b2-dee17f585876", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86b2226a-3b1a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776512054, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776512054, "uuid": "1b4d1ef2-a13d-4bae-afb1-df7fb41ef2a2", "comment": "Malware payload (Mirai)", "value": "5ec9d25242e39af9dfb408f1848b4b61", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776512054, "uuid": "413bc2dc-3f89-4fe9-96fb-677ebb27d761", "comment": "Malware payload (Mirai)", "value": "5f320c2c06b5cf0d494f311cdf118e294868d0181560104c02d6f05eef1e9e3b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776512054, "uuid": "735f5e44-e923-4644-9c33-0fe3633eb14e", "value": "T112730250F69CF5858DCC4D7821843E638EACF68190751FADB7EEA8C2752D90F38958", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776512054, "uuid": "ceb55116-7708-44ee-be67-c5653dd79888", "value": "1536:RMdpqmmVD63pE3HyF8+z4tGHrlztKIfHnONW1ikX7VBotkWVH26:RMdsHDmbYwhKIft1tX7bkkW7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776512054, "uuid": "29b95a24-3ec8-40c5-9d17-fe52f503ff18", "value": 78616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776512054, "uuid": "557efc18-4718-4980-bab3-f12ff13dd66d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15e96816-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776512083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776512083, "uuid": "e427af49-d10b-4722-a3a0-80069d0dd95d", "comment": "Malware payload", "value": "99554a8313b0f99ebdaed9126d32bcff", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776512083, "uuid": "d4b01751-fc9c-4d9f-be2a-ba9fd3de5b90", "comment": "Malware payload", "value": "2791990fec00623e0c62081b8145b3aa2d9b00e145a8880ff66fc4a025cc8e4f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776512083, "uuid": "7403476a-efea-468f-a6c1-f369644693d5", "value": "E953120223AA297196B14AF1E7FDBB88E6493D588FF66C15AC113D6CF97235D1CC8908", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776512083, "uuid": "0fe91975-7236-4f27-9858-b1478ec638a7", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8Px6:yYI0ARqw1qAEv7UIFM8oJorFquyj/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776512083, "uuid": "71251577-dbee-4ef8-a8c2-c50c3e42d97a", "value": 63712, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a27dd05-3b1b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776512301, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776512301, "uuid": "645c5130-6d83-4507-815a-0d8b9718f872", "comment": "Malware payload (Mirai)", "value": "aae8d0fe3edf5b6fafe9b4e31b8f79ce", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776512301, "uuid": "1f0911f4-cc0c-433f-a7dd-507ddaa1aa75", "comment": "Malware payload (Mirai)", "value": "7a71a50005dfa90d36e25147c9ee7718e9f650f1af14bc08a1a71e59df3b61b2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776512301, "uuid": "78218958-7c3a-427d-b389-4e0045f4ab6c", "value": "T1F14302611C742336EE29437BD5BF6B89507096298840787EE5E970C727EE7317F1A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776512301, "uuid": "6f8633c9-5929-4276-be4e-5178123db7ee", "value": "1536:Oqx3kottijLmz3Tb3Schwlzvqkktf08nouy8tyj:OqGiA+r3nhwVqRscoutu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776512301, "uuid": "d5b10d34-50e7-4df0-ad2f-290a4925c2a6", "value": 59212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776512301, "uuid": "3bf6a8f6-e2ca-4269-a86a-0eb70a3c18ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ddec626-3b38-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776524897, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776524897, "uuid": "9785a1b9-585b-4cd6-885a-e3478ff3a544", "comment": "Malware payload", "value": "c911a331fee6f6561be7f89accc30201", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776524897, "uuid": "a864de98-939c-4850-b345-19e8e7f0d4ad", "comment": "Malware payload", "value": "69bf25ec3b6de3167c108b6aefbc19b53f6ac2222b87dc5ff87a050dccb7272a", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776524897, "uuid": "7718282c-b739-4f34-beda-6599bc8416fe", "value": "T1AAE0C00C74900433BD365CB9B6C711C4A10FC35B3C0FA69DC695342BF0F488090108", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776524897, "uuid": "160e1272-48d6-438c-9815-5de9beafaac1", "value": "6:/24J+d9FENsRV6M5dOuRVYrW5YQIe3FsDKVKhOXqIKLsVKhOXqIKa03IKa+IKq1P:/24J+zF8sbYuREcYjWghsOLsghsONJYx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776524897, "uuid": "5aecf9b2-ea19-4286-b0b1-ece09d01cdf4", "value": 358, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776524897, "uuid": "7e2f2650-016a-4797-a145-75f1be2cd9f6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83f7aa84-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776526222, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526222, "uuid": "e27ace3f-857b-42df-91d9-5aa22f96c9b1", "comment": "Malware payload (Gafgyt)", "value": "c15e1e5c19a3f351ee1530625b677de1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526222, "uuid": "d92d71db-5c51-4bf5-9576-33f99fcfbbcc", "comment": "Malware payload (Gafgyt)", "value": "71bb0cb1b7ebefff0433ac36de167d00d0ee19578bbe0316f8c10734c56fd014", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526222, "uuid": "cbc198f9-c15a-4f0b-85a0-0bb10af67bd4", "value": "T179E3971E7E21DF6EF559833047B38E30969836E636E18585F26CE6481E7138E241FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526222, "uuid": "749d041d-73f4-4fa2-8e31-b7622aa7ad0d", "value": "3072:i7qBY8ikREm96cPXqF9udnUawzlb6jHkkG2AgK6KM5hspZH:i7qJikREm96cPXqF9udHGW7hSD6N5hWH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526222, "uuid": "0241c66b-8d52-4c25-880c-6bb94e2495c8", "value": 148080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526222, "uuid": "8f385316-c4ff-4633-8ae9-55502cb5b117", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84d284ed-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776526224, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526224, "uuid": "3a3aa2e2-fdd8-40c9-aeb0-31e9b124ef7b", "comment": "Malware payload (Gafgyt)", "value": "f06aeecef583819de246d8ca938f92e6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526224, "uuid": "09ccf262-6372-4c69-88b4-a7db1ed1bf7f", "comment": "Malware payload (Gafgyt)", "value": "0bd4303fa4b78eb27323a138b541ffa58b8c8da08d2619ac285f8d49cd538d6c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526224, "uuid": "b6051c47-eef9-45e0-8c47-0c7375e37bb0", "value": "T187E3D706BF109EB7C81FDD3301F98B0124CCB49725A53B6B3674DA69BA5A58B05E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526224, "uuid": "a2b0bcf2-ab31-4a2a-a7e0-f6c8b839b127", "value": "1536:lTKKVHbKBo+0NFgNZhEyv2zJuoaZ8jCSRCt6+5Jx0/Jwq75hsp8nipD:hYhEVzPasCB/e575hsp8ni", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526224, "uuid": "cd6af29c-49b9-46c1-8ba6-66aaea19f21e", "value": 150112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526224, "uuid": "e9c5344c-a4b0-4e08-b574-1d51447f0856", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84e2a8ae-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776526224, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526224, "uuid": "e606a900-9e70-4563-8a49-8f2d119d1d63", "comment": "Malware payload (Gafgyt)", "value": "a9ebba2f324c76429b16f61b0c009c55", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526224, "uuid": "e7369bd8-1d54-43a2-8ee9-0bcadb69263d", "comment": "Malware payload (Gafgyt)", "value": "dd11a8346ee36709c8421b2329f367757eaeb8105c3abbd72c1a94943a34be3e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526224, "uuid": "df7c6f0b-3315-4a83-a124-c94225eb02a4", "value": "T145B31A037B0E0B83D1533DF02A7F2BF1979AFEE215A5A184651EBDC062718B32595E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526224, "uuid": "9ce43dad-fe6f-422a-a239-6feb76a79e88", "value": "3072:4BbSGHdVzg8+/1LnSjKcXkmNG605d5h9p63:4BbNCLn4Kh8G6S5hK3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526224, "uuid": "b0daf3ca-0762-4a17-9025-e1d4b0622219", "value": 107848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526224, "uuid": "4da4358f-960e-4301-abb1-5cb704bc3056", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "853d2f5d-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776526224, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526224, "uuid": "6197a8fc-dd86-4a88-83ef-867db86eb3b1", "comment": "Malware payload (Gafgyt)", "value": "775bab7512e16275ea4d89e12b91b2b6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526224, "uuid": "55b9fa10-d547-41f4-8d66-6cfa27111cf9", "comment": "Malware payload (Gafgyt)", "value": "2c8132cbc6d0578a67baee05b8e0a00db7d1a14f31e11608074fe8f7d9608c65", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526224, "uuid": "a99c2678-7fb9-4f1a-9e6a-41d8cf556599", "value": "T170A32926BD018F43C2C315F3BB9F47887B2667F9D2EF3243E925AFA027564D609269", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526224, "uuid": "7c0bf24b-596d-4877-84f0-94410a57f2c2", "value": "1536:HGuY5rm339swDBmti+dqFRBBYZF3C2or/OQrW+sbGI4q6yPx85hlpMVq:HGxoH9RNNf/YZLoRc/4rAy5hlpMVq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526224, "uuid": "6a6806b2-f317-4a10-8e97-31320c1c07dd", "value": 104276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526224, "uuid": "378da17a-5349-436c-9657-978b2030a6c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a61f5840-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776526280, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526280, "uuid": "33e62565-e82e-4f1e-a7a3-4fdcf59fea19", "comment": "Malware payload (Gafgyt)", "value": "6cdf4f978722067925d94ec2a24c3006", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526280, "uuid": "d4fc7000-da10-45d1-b87d-646676afeee7", "comment": "Malware payload (Gafgyt)", "value": "aea7bba2d7b88d0108c4ff27fa7a85f260ace6a51ee8ce45dad3a566704513dc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526280, "uuid": "02dd1eb3-869a-4923-97d7-24022ad7fb5c", "value": "T196931A9BFA02CEB3C41310F112AA9F219D71F9FB4827E642E3646DB4DD151C26A15F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526280, "uuid": "05e6e886-8cb8-4d03-9189-7fc0a565b91d", "value": "1536:mikcxDffsiqU6s7ck+LWQw5+QwSNg/UVE7bnVCMquoJ33mZTEgV:miH7qU6sXjUINgUVE7bVCM+J3WZTnV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526280, "uuid": "7815e6b8-df6b-4e21-bb2d-061bbc84efa7", "value": 91212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526280, "uuid": "a8338499-4718-41b7-ac80-cdebcb3e1517", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6227a58-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776526280, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526280, "uuid": "70b633e2-309c-4e3d-8dea-4d76d2eeaca3", "comment": "Malware payload (Gafgyt)", "value": "7a8c8f47c21d734f57122372e6ec1b14", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526280, "uuid": "94d579ce-9179-4ae8-ae09-127272c06eac", "comment": "Malware payload (Gafgyt)", "value": "3a7c12f4e5be164a96c499875978ffaea062b8e5a42b446294689081483bbae3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526280, "uuid": "e92e6b8e-0617-4a0a-95c9-fee9609bb762", "value": "T193934923ED125F0AD20B64F0A1F59F351F22B8FA89975AD9E065DAE06543CCAB015F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526280, "uuid": "f9d50460-50f3-4b42-8c8e-1f16f661e4d0", "value": "1536:9rZLXqjVVPBrwKYdo6nZz2ak0+Cvuy0/+ym5hV1qqpMm:jLqBVPBrXYdz2ak0+/yIm5hjqqpM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526280, "uuid": "7ec375ff-42ee-4846-b1c9-fa4cb730ff50", "value": 92164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526280, "uuid": "baa8d2dc-65ec-4f31-9cea-34cde7080262", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6230c50-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776526280, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526280, "uuid": "6b45826d-54f2-4e79-8f9e-1367151aa281", "comment": "Malware payload (Gafgyt)", "value": "bf01c7e1785cdcb48a4b862fa040a33c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526280, "uuid": "28936571-c6c0-4b34-961a-c4ca091ea605", "comment": "Malware payload (Gafgyt)", "value": "8a7dc9e82c8d24fe5c62c9dfac5dfbfa9fd5a514bcbdc8cb0e3fe4a1e4ee746f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526280, "uuid": "2d947f46-8dad-4cb9-a215-72289741c107", "value": "T1E3C32917F9419F41C1C325BAFB8E964933136FF8E3EB7102D9249F60278699B0E769", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526280, "uuid": "45724160-382f-43c3-999e-ecd0e0a34adc", "value": "3072:i6nP6nlJosoawDh6iNwaVBgqO7sCk3Xr5h/pc1n:iSP6nlesoawF6iNwaLgYCk375ha1n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526280, "uuid": "4c7e00c3-2ddd-48e9-9518-f9d368caa7c1", "value": 129968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526280, "uuid": "81d247c9-0fda-4a2a-a20d-b14d86c67ca2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a624b798-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776526280, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526280, "uuid": "1843dd6a-5104-4aef-894b-82d7c7207aa9", "comment": "Malware payload (Gafgyt)", "value": "a8e7bb0ff086c4e0f7748eb48f04581b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526280, "uuid": "0e3443dd-ebcc-4892-ba79-aa12c0868f9f", "comment": "Malware payload (Gafgyt)", "value": "b09966b839f0320aacaa755b67b523891ea4d3b95bc64607ebd81312a554e2da", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526280, "uuid": "c6c7fd9b-5157-4000-aaca-a4809b32392e", "value": "T19FB32A17B9528B12C1C215B6FB4E564976136BFCE3EF3212C9249F603B874EB0E2AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526280, "uuid": "5654e585-df45-427c-b44a-22eac7e9ee19", "value": "1536:yLnB+44uILd1u8HUULQh+O3a/1T/TIpPtMbiXfM6RJZf6jRS5yYL5hFp1Bvr:VhU43GatTmfM6RJZf6jwQa5hFp1lr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526280, "uuid": "f607c47f-9d25-4950-b715-2a5ef2817441", "value": 116124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526280, "uuid": "85eaee69-431c-4016-a782-a8b223d71f0c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6281676-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776526280, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526280, "uuid": "033a8efe-1b23-4cb4-ba55-82e95f8a2fdc", "comment": "Malware payload (Gafgyt)", "value": "be2f095d7c5595e30fc6536aedaf946d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526280, "uuid": "a405f335-fbb7-4f49-a553-7d031b7541b0", "comment": "Malware payload (Gafgyt)", "value": "e3c053bbd7fdf8a19675fda0402ae0676bc14600922feab68a1467de9484d2a7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526280, "uuid": "156c8360-3ef9-4106-b50b-a4aa37d5cacb", "value": "T110932BDBFA02CE73E45310F112EA6B218971F9FB1823E682D7647DA09D511C19A16F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526280, "uuid": "503c0be9-9d73-4912-9a4f-53626125e4cb", "value": "1536:0Hv8hVUQyPQTUgrLyEyr67aUvAEGafYxRDe3Z2NOqXJ33xZSEgk:IsU2UgrLo67oIYXep6J3BZSn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526280, "uuid": "6c09b445-6ccb-4ca2-8c97-55fcdab3b70d", "value": 91212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526280, "uuid": "9310cb13-4777-4d96-baaa-1c12605f12df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "773a46e9-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776526630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526630, "uuid": "a311bd51-fd43-4aa2-9876-64ec0aa35e04", "comment": "Malware payload", "value": "f21ee2c5f026ee528ebc34df0d3240ff", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526630, "uuid": "77a096b6-f6bd-4327-91ee-738ea40e0196", "comment": "Malware payload", "value": "e8d70a7158bc83a0a49af74feaa379706a9989b943caa58f1d2c46cff851daa5", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526630, "uuid": "346167e8-1ad5-46bf-ade5-20fab5354c67", "value": "T1FA515E9B02009B319608858FB7F23235620BE18E5BDED749FF48AC2C0FC5D5C728AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526630, "uuid": "34d3a8c3-71ab-4ce0-bb91-39b890100f90", "value": "24:y32JMO4biBe9uZ5EuEnE2EhEYqsbwl6JUfdKhM3s:y32JMO4biBe9uZ55cvyysbw1KhM3s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526630, "uuid": "1688b316-e820-4543-870d-3a9528a0eb7c", "value": 2907, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526630, "uuid": "413b07e5-262a-4922-90e5-711c6585292b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9db2b6e1-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776526695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "e60788c4-3e07-41c3-8eb7-e59d5b120fe3", "comment": "Malware payload (Mirai)", "value": "965e6d847c3b39ba1e9fb5f345835587", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "dbd9cd69-6bee-4761-9d3d-ce873dd9cc29", "comment": "Malware payload (Mirai)", "value": "712b18cdb42791a55fc508d16c120fcf7ed2a5eba7cf3c424a7cea2ec42ebb85", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "95be5cae-e6ea-4074-a945-86f475f9d096", "value": "T1BA5302F6A0E47ECDC25A5334021F0A473EC2B7B4608A662AB5D0B6694BF1740CFD8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "5ea72dc9-7cb9-48b5-a317-fdb893ba8890", "value": "1536:C1/S5aOdeB51F+yuXkoPgvFbFX6hTZ0f8ASeULkg4azHg:CM5az1Fy0oPgdZX6hTo8R9LGazHg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526695, "uuid": "f4ecfa07-e2f2-4143-b7e5-06368c99dbdc", "value": 60808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "bbc58c8c-b5bc-4b59-ad0f-a3e379ed5575", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9db3c84c-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776526695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "0ac10813-ef38-4f59-97ef-96935e640102", "comment": "Malware payload (Mirai)", "value": "2a0ea8d3763e9576ad09f978939d078d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "c0b41e2a-eccd-4050-8f62-482dafc1ab9e", "comment": "Malware payload (Mirai)", "value": "bbdbf4d8f02ce33d9bb05f8cc0cd5cfb23225f7bf1d351aa8176f059773d48f4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "05d651ed-c5e0-431b-8695-3d9eead79c44", "value": "T1C404392F358191F0F6411B746BCBD3976C390BBF51A9909F6B416329B6E0B7BA02C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "6ba686ef-763a-4cd3-a09c-1cc0cfa5e127", "value": "3072:7mPX5bl7RDfPIX5eG/L1AL0SFU66gOSNL9CnNgRdgJi55wuUXS:7eJpJUVD1A8n0YNgEJi5ari", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526695, "uuid": "ccf1c82f-ddce-4789-8240-3a8f2f04fb5b", "value": 180808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "28e5421c-b7c2-48e0-8079-85d4b0f3d00b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9db529ea-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776526695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "61c372d8-bb1c-4f69-9ad1-97a78f987b18", "comment": "Malware payload (Mirai)", "value": "b7ed3b32bca15e8f0edd603638e7e45b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "cab341fe-fb5d-4bda-a67d-fd8fc9c5d805", "comment": "Malware payload (Mirai)", "value": "3a47a8017bce2c441a11612b5c9fb50f882c7d5da9479ec97449327fbb0665ae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "e069bb63-661d-4762-aa2e-128d9da632dd", "value": "T18DD3B021E4006DD1EC2129F578BA96B80350EE740BDE1582EFFDF95E747BD9438AD2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "5854c34b-8135-4c42-8d6a-8554c300b89b", "value": "3072:PnicTtkAg7FSGp+VJE6AqUjq+c7zAbpb9/x1:PiySSGp+PMmT7zMpl/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526695, "uuid": "9d089ded-834f-4812-b3a3-fa589ab2400e", "value": 131664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "d33c2409-58ce-42b9-ad77-cfcdbf903c0e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9db5e436-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776526695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "39fec7fe-e642-4d2d-8ca3-17fec0448b70", "comment": "Malware payload (Mirai)", "value": "81a571149394464647951970327f2131", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "9132d96a-9db7-4d61-88b7-19fef803c9d2", "comment": "Malware payload (Mirai)", "value": "394e24d1d44d40a17a5b07a46d27237ba10d18ca38fcbd71963b22f2d140e486", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "7ab79035-0161-4bdc-a206-287730aab68c", "value": "T1F56301CF6EB02B2AC1D8A1B5703415DADC3ADDC6D343C69C86E6A796473943760C8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "7b89f908-250a-4ef2-ad45-cfde032e6eca", "value": "1536:saxZLmYKVDNSl2y08yumeJyGYVmIMGjmd01nNo:saxZLmYKX+t08jmeJhYTjm61nNo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526695, "uuid": "ebfcf414-a3a7-4ae5-a228-d43bb9c14786", "value": 70460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "d30f580a-64b2-47a5-a33e-d4019f3d75a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9dbe15a9-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776526695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "7a103aae-c54f-4e78-8a49-46aee9f1180f", "comment": "Malware payload (Mirai)", "value": "da12aab138492ccfc1f1b0c1f139c0d6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "4fc1aadd-0ba0-4e6d-ac5d-98ed0b4039f1", "comment": "Malware payload (Mirai)", "value": "73830590924e03abbc9a62033ab017f1fb4252ba5ca97a54867a450b61774b12", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "a192be2c-7162-4a2f-8028-ff6bf2e2af97", "value": "T17D631297FFCC1B9DFCD91AF807AB66D72322943554B341A809E59882816FDB111EAC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "204273e2-4041-44fa-b3e4-73528163de0f", "value": "1536:27MbwKNGjjH+Xq34n/q8Zu41zmX3sDgSIJ1QrPJ:27Mbp2L+Xqdfoz2srI0rPJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526695, "uuid": "4c9f1616-8de2-49d7-ba1d-69e398f540c3", "value": 70860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "006a5206-d1b3-46a8-9a1f-90e1bf178181", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9dbf6d84-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776526695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "6cf625e7-efe9-49ff-aac8-1f6969db85e2", "comment": "Malware payload (Mirai)", "value": "841f62a925229de2b586fc4c98117b90", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "dd3cd792-8862-42e2-bc80-6e79273c8fe8", "comment": "Malware payload (Mirai)", "value": "d7bcb05fa2e25538a52994728c958291a6e4e294e262d6dff40ef11dcfc696ce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "f5e77595-bf1d-451c-83d0-905df1f1ebdb", "value": "T1FDB3E085B210AA55C02672FCB187099093B17E7B4B9A150B44B3F5B46DBCCD47E0BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "6648c7e7-bf44-42f8-9b5a-c277ffdc0905", "value": "3072:jx63zpjhO5z01nCU375P5wk5SOez7wuM:as5zqhr5Nzy7w3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526695, "uuid": "dd586c7e-c74e-4233-9134-9143949b4dcc", "value": 107680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "5aaf4ee9-9510-4b0f-b507-4838f72100ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9dc0b88d-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776526695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "8c140831-c98e-46ce-b0c8-641be874f2ff", "comment": "Malware payload (Mirai)", "value": "2b99917324c857ec3db94bcf8bd587e9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "6421efbc-be67-4b26-9f01-d3a66a1fa2e8", "comment": "Malware payload (Mirai)", "value": "991779edb615e17abf32fd62d7aa2a051d9974be8b5acf1cf82dfb0208512b7c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "0f07bb28-46e3-4960-a4a1-8719e71e5b28", "value": "T104146C2BB3C3ACE6C51063308C316362776FD7081958EAFFDA1B3794A99772256246", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "c594fb31-f30b-4189-8dc9-4c82f570f649", "value": "6144:1R9Om5159ZA0mzoWcz4Mm4ztkES7IKTtW:BZAyFzQSdS7Ir", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526695, "uuid": "f11da25e-2584-4c8a-9f65-3b01b52273e9", "value": 197352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "755741cd-4db7-4774-887b-265894d72dc5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9dc1bfa9-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776526695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "0b47b380-1e6c-473d-9c02-5db8c994ddcc", "comment": "Malware payload (Mirai)", "value": "c64e755297f28618938fc4ac391a9346", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "18c19f62-19b7-4e11-b558-b706dcfcd529", "comment": "Malware payload (Mirai)", "value": "134d59d9722d5868bd5c0df4f46ead7d4c7db31c3c2ab0ab291edc19c6693e01", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "b7baf8e8-0c8e-478f-be3f-d8dea5a9df57", "value": "T1C9B3AF87B2907ABEF0A45E3FC4135E26A6259F705583273D71FDF9906E3A3503292E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "9ea915e8-e036-4c7d-a0b7-d9191c29d5fd", "value": "1536:tdNSXAeuUGWnKYUqwaJ1Xq/3A5hcB57laZeCNjHWBOdiyWT15Ov6fHzM8rSR:t3SrlGWnKTU83AQB5A5Liy36fAUSR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526695, "uuid": "e6f3ccb5-a9e3-4b12-ba36-742e3ec3a7d6", "value": 115116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526695, "uuid": "5de5f585-b5ad-448f-a7d4-9ffd6282dc9c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fa7f3ef-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776526698, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526698, "uuid": "2a5264b2-36c1-45be-8ad3-37370f03a53c", "comment": "Malware payload (Mirai)", "value": "8ae228bdd386902d6884714737078e60", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526698, "uuid": "ebbc032d-109f-4b2f-8398-6ad9da52d910", "comment": "Malware payload (Mirai)", "value": "c8485b74269be51030096c84bd1373c351982cfd95c6f07c04a0bc9693bc040f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526698, "uuid": "e0294d11-74bc-4c9e-9548-d1af9068fb7a", "value": "T176C3F185BB6369D1C1A242BDA4C00AC387912E318BA317480699F674387DDFB1F69D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526698, "uuid": "be226fd9-8001-4da1-a4be-864e4030107d", "value": "3072:OBb4K+nqsnSjZldbaUXGSgqTWo1OWqEwztlMMTnP:0OCDjXG9qTWywxlxTnP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526698, "uuid": "9f8ca1d4-29b1-4d93-9c8b-0f2007224512", "value": 127816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526698, "uuid": "d155b45b-00f6-4477-8b20-4bd2c2466d19", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fab3295-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776526698, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526698, "uuid": "6fb3073b-a2a9-4042-b685-dd4bb4d02c08", "comment": "Malware payload (Mirai)", "value": "95eacf3223c014a39392b5ae645dbc61", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526698, "uuid": "d2738a11-2a47-4e6e-82fa-ab7b1ad8a056", "comment": "Malware payload (Mirai)", "value": "1e58c112130b1ae97966152d7776aa41094a69e5e1dddc300359fd1b7c83c684", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526698, "uuid": "1b34b65a-ca55-4f24-806f-01122f03f276", "value": "T1377302B22167DEA1E6B1843223473D597D32887A077462BEBC7CA76FB486E111C0C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526698, "uuid": "2ba3f93f-5b04-42dc-ac3d-5f791b33cdf9", "value": "1536:V8zRnwvX0/jMQwZuOPFPijvDMwhQi1rYGhQZ9zWmRFzYoro:CzRnwP0bMQ2RijvDZZ1rYGhG13RFzYSo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526698, "uuid": "73a2d3bd-dcbe-4675-9b68-05866dd59f17", "value": 74772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526698, "uuid": "35559b66-d419-4659-bf63-1f0760447b1d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a06da1b5-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776526700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526700, "uuid": "77bcbaec-2542-4d77-a868-216fa071b071", "comment": "Malware payload (Mirai)", "value": "808d07325867be608f74f02a348e1156", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526700, "uuid": "10389872-8536-4889-a75f-aebc8a72b69f", "comment": "Malware payload (Mirai)", "value": "cf0ef4534a5f906a8dd917ebc4ec7d542964c83bbec56aa49affeadf99729bc4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526700, "uuid": "99b75e7c-4c66-4f2d-934f-e31b0ae6c278", "value": "T1D6D3CF32E0086DA0DD2117B43476597C0340DEB40AD59243EFBEE5AE28B7DA57DEEB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526700, "uuid": "62754103-176f-4b26-858d-640b43f6fa1a", "value": "3072:jNOFV2mOAc6NBmjOd1CVOHVv3WDxGGRhaUNhkv0Zx6:xOFgpOEoVv3MXL5NhGOx6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526700, "uuid": "cb80d978-8b24-43f2-96a2-c71c9e7b65cd", "value": 131656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526700, "uuid": "09300560-2c21-4aa5-a92c-cf587d7982ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c31c64ac-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776526758, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526758, "uuid": "70a1e2ea-6a2f-4a23-995d-04406bfd3324", "comment": "Malware payload (Mirai)", "value": "d1d9087c16fe36784ce8223c68506a25", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526758, "uuid": "2079cb00-b10e-4c9e-80b6-9e153806fa5b", "comment": "Malware payload (Mirai)", "value": "2142ace932912354fb84da2972608de6182b99614f39735e362ab10aa9625d85", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526758, "uuid": "23a54263-51a8-4795-b879-605a95c57312", "value": "T1645302415A6CE83BCAE2D53C0F7801E546985DF464D7401F43CD7DF88A06978BA9CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526758, "uuid": "00b8f1a5-4ff0-414c-8bea-ac55c0fa9411", "value": "1536:Mdcqm5iERozq3p7o8FwOA4zCKOFGUfKbeH6UhV/VVRAQu:MaHJgMo8FwOA4zUFGUO3UhbYQu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526758, "uuid": "79635e07-b4a0-4eff-b048-511a5a57db02", "value": 63928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526758, "uuid": "6a0f2de0-63df-4bc0-ae99-3b88b0b98c53", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c32030c2-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776526758, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526758, "uuid": "f54ee341-f6e1-469a-8922-562a756eea58", "comment": "Malware payload (Mirai)", "value": "3eb502cb4272a7e805ed62bc75b5657a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526758, "uuid": "8500092d-c6dc-40ba-8484-51ea6d3790f7", "comment": "Malware payload (Mirai)", "value": "2ac4ef7a6ca610f5042e73c65d4fb5b8726320a6b3be83d72c0788368cbd1849", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526758, "uuid": "cdf048bf-39d0-4c18-b7ba-e97e5922a262", "value": "T16A147120FA0663B1CC731A34A79A2E5A6E7704559FEB26312D1F533CDE628509B31F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526758, "uuid": "147de87b-4a16-4009-a68c-f7600d8f74e3", "value": "3072:IcHZcggt1NJmeDQBwnKUDMaVsb3pjr1lCR8UKG:IcY5JpMByVs9jSHf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776526758, "uuid": "26b7b76b-d75c-4f0b-9439-5d785f11c782", "value": 205416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526758, "uuid": "9b7f7c1f-2e10-4002-aa82-abf52260dfa9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf1abdcf-3b42-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776529328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776529328, "uuid": "a81d1a07-894d-4caf-befa-f58515417911", "comment": "Malware payload", "value": "4d25105ce38ba7ca424b4834389e1e89", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776529328, "uuid": "f1d0250a-8e2f-4ef0-8df7-297dfd367aeb", "comment": "Malware payload", "value": "b68a2b347e5f5d2fcbb1c67252c2b78f341fb2ab76a1d0254e2af51b06a4f464", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776529328, "uuid": "20495fb2-8b33-4678-9d5a-13454a737510", "value": "T1C793E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776529328, "uuid": "ce57ab7b-e5de-4e93-ac57-5ea1a6894f87", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPX8IH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776529328, "uuid": "d4d4ec6a-265c-43ba-8374-4e3a4d77c799", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776529328, "uuid": "5967b0c4-056b-40bf-8e03-dfb1a8be1bdf", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba59fda8-3b43-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776529750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776529750, "uuid": "7554b95e-9882-482d-b19c-be9602454c44", "comment": "Malware payload", "value": "98631f97c6cbd1c6ffd3b75cdb823b30", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776529750, "uuid": "564ea23c-2e5c-403e-90f8-bc4f9953aa37", "comment": "Malware payload", "value": "e63e3f73ff7581b497ebe36928eea0e4808a86de6b50b9d4dd0d155950074f22", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776529750, "uuid": "1b63654a-e046-44da-8ee0-fdf797599b35", "value": "T1168309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776529750, "uuid": "a3e1d915-11d4-4ed6-89dc-7f0b20ed982c", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbn7Wa6VN/:XEKltp9txAX/yr2pb7WvVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776529750, "uuid": "0dded128-7828-4d7a-ac24-b77e5f4a0ffb", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776529750, "uuid": "4b41cd50-62e3-4578-b999-f91df5c69ed1", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bf03443-3b46-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776530772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776530772, "uuid": "26dae672-37c0-4071-9843-ecc4054b9ed8", "comment": "Malware payload", "value": "ed1997eac5a8307aef4de14ba19f848d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776530772, "uuid": "aa11b563-0c5e-4a5d-887c-ba366ba636e4", "comment": "Malware payload", "value": "f47e90789d8ef140b11d63dda36d0bbbb76e6b385e6b28bbf992fbf325747341", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776530772, "uuid": "84604b79-2997-4236-93a6-8e654ad26a42", "value": "T19C732B5D3BDC5AF1FF453833A317515A3003910D53E173641BD2C53444D9C4758C78", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776530772, "uuid": "7b99d4a6-9ef8-4c25-85f5-e19bf909d635", "value": "12:SaZAH/6iO/7dmEvVuwizuTG84r+xN3VKZsslrwb2Ozezeivlln:S6LV4+f4rENFKZsslY2Ozebvll", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776530772, "uuid": "f923df7e-268d-46e8-ae2d-5f8ead1b240d", "value": 80584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776530772, "uuid": "91bd113f-1025-4785-9007-92427f22a1d8", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfab406b-3b46-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776531047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776531047, "uuid": "c95318cb-55cf-4bfa-b704-3b6a7c5c06b1", "comment": "Malware payload", "value": "3d7c452e9b82d6470307ba6750501fd1", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776531047, "uuid": "88f89138-360f-4abf-bc8c-8de6de630333", "comment": "Malware payload", "value": "cdec1f8d0e291bc52a2fdedd9c15aeee0a266d37fc690223eb5efb5022e7c79c", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776531047, "uuid": "b778fc6e-9b03-4216-bc31-555a92d423f3", "value": "T10896335F88894D8716A83D59FEB97487254DEB97182F3F30C28C204E22D6ED52C47F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776531047, "uuid": "f69eac0f-ffce-4e2a-9c41-5cd375418833", "value": "196608:I3PwOBU40GxRTJ0kLS0cGMWOryHEzpsX+Db2mHdKE/JJjFI6:vOBUwRTJNLLcGMJryHEzOX+DbTHN/DZJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776531047, "uuid": "44d1ca80-9c2c-4228-975d-50e478addca2", "value": 8703744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776531047, "uuid": "0dbf00ac-b5df-467d-9a55-72150d37bebe", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb3d31e3-3b48-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776531899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776531899, "uuid": "a4b00daa-f6f6-47ae-98f7-1c6f18125f0f", "comment": "Malware payload", "value": "65912b1fca26c76ef89be599aefad94a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776531899, "uuid": "1b3bb282-f74a-4f05-ac51-95e43859a192", "comment": "Malware payload", "value": "a8b67c8f4ca03a2384161fc7a342f03215a88c9c558b6262bc677d1aecd9f725", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776531899, "uuid": "578a23fd-1db4-4af6-af1f-6fc90e56517f", "value": "T170931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776531899, "uuid": "b5ae63cd-06db-4962-8ade-4e1da6eeed6c", "value": "1536:nByp1tF/uwMmAIa14oXoKIMepeV7tb73WdxCrCitkb5fv2v05xLkrJKg0sCxKToh:n8iIL0GitkbFv2v05xLkr10sCxgoIy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776531899, "uuid": "539c20a8-258e-48f6-8583-b055c6abe163", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776531899, "uuid": "52a12ea5-1657-4a69-a74f-1430a925d524", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cbce57f-3b49-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776532277, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776532277, "uuid": "51d253eb-dd4a-4522-9683-e311539d5f54", "comment": "Malware payload (Mirai)", "value": "e49063cdf047b9916cebdd356799c616", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776532277, "uuid": "659be469-70cf-4a29-a97e-f744df822fd6", "comment": "Malware payload (Mirai)", "value": "0547ae658e5383989fcf75408e813c491da48342dfd32bf76e051c969ddd527f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776532277, "uuid": "f2c2dc02-66c5-4e31-b1c8-901a4ed98a97", "value": "T12BD33A81FA8BC0F5E41704709027F33FDF31A6295037C55EEFA59E76EA67A4286062", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776532277, "uuid": "e81aae72-1e8c-4f09-8399-e60d9c57cda6", "value": "3072:TfsxBaiG9EgrjitNQBTwkMRcclzQta1+bva:gxBhg2OTS4s+ra", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776532277, "uuid": "dd3bf761-0861-405c-baa2-8d3fd5423e05", "value": 135296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776532277, "uuid": "985db75e-1aa2-4798-8a5f-d1cc6b64c807", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fab4cc04-3b49-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776532434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776532434, "uuid": "ed3f5f57-0159-4a09-8339-7498c674a425", "comment": "Malware payload", "value": "e231a995e119e80458db5cdf0dd9dbfc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776532434, "uuid": "6f7fb3fc-24bf-4d48-8702-7cbe8d36c1ee", "comment": "Malware payload", "value": "04578db2dd4fe76ee1ca37a32fef18c363e2f797e2b23351dc701c852a8e5a59", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776532434, "uuid": "dd6aa73c-b798-4175-92e1-958d458a8a8f", "value": "T18C531BB2B190A437B53B98D5B1654FDE30A49206DD034690FBF89271DAC6DF3BE206", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776532434, "uuid": "cbbe95fb-8d66-4434-98c3-d88c5183591f", "value": "768:snSm+seP6mN2OC5IIsD8Ixeu1QgupJPmUcyYojcNB/ymSXVlqYpMDquJ6GZmFafu:D10IIdwepBF3PjcNB/ymSXVlq7OFAu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776532434, "uuid": "59303ab6-be0d-4892-8fa5-fbc87d1f04bf", "value": 66341, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776532434, "uuid": "4debbd89-a7fa-4e3d-aebf-48400fe5e10a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d74ccffb-3b4a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776532805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776532805, "uuid": "7f011623-c22c-4c51-bb60-386afea16279", "comment": "Malware payload", "value": "fedfca331e80e92118a97eca67d5db06", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776532805, "uuid": "a681abec-4f3b-4465-8cd5-a01379e83780", "comment": "Malware payload", "value": "36a89f65fe2d693a094b51495f3a84d0f4f2ae7276649952d6f78c85282e6f6d", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776532805, "uuid": "313a9152-0ba0-45ec-95ab-715b07584760", "value": "T19E66F122FDE6E839D96750B351C1816B602A13DDEA0AD82F4EE00D857E71D4A4372F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776532805, "uuid": "d5344f72-2eef-4937-8ee9-3fa590cb099d", "value": "98304:XaL2kHQ50tizUCmmGu+KGgKWWAHdOLmoqoGGn0WxGX3KRvJd0hrGNLuiIAMhGgyd:U2NUCmmDFGttJAGnjIaVT0hrGMBFGg+/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776532805, "uuid": "94362de3-415b-4d8c-9e46-1e61b0829090", "value": 7064037, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776532805, "uuid": "8af2bf11-c8e6-4152-9b26-73d667dd4717", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1646fec5-3b50-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776535058, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776535058, "uuid": "824dbb85-f826-43cb-ab99-7e315a346a1e", "comment": "Malware payload (Mirai)", "value": "1427e39724e8a3bc4eabbc8704017377", "object_relation": "md5", "Tag": [ { "name": "92-112-127-184", "colour": "#603182", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776535058, "uuid": "6646f294-7265-4a29-a003-359e64a113a1", "comment": "Malware payload (Mirai)", "value": "4a832f062624c08ef83d3643c1afc494633aca7c24ffb12e1434d043530ca882", "object_relation": "sha256", "Tag": [ { "name": "92-112-127-184", "colour": "#603182", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776535058, "uuid": "b14776ab-8e02-41ca-8d63-c3706cd8a1ca", "value": "T16DE3F749BC819B10D8DA36BAFA1E029933575B6CE3FA7202DD245F3177CA95B0F726", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776535058, "uuid": "b681c902-1073-4a19-beb2-53d3cc7ac40b", "value": "3072:nWDblb6kmLJRAPf6MSW2H0j3AgnaqKFyvo0ZVKW3A3jA5PeW:7kSPAX6q2HS3fnaqKFyvo0b3A3s5WW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776535058, "uuid": "61ffc1dc-7ecf-4d96-acde-30292a5cae2b", "value": 150864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776535058, "uuid": "29344393-e70f-4d31-a9b4-6038c2bf5411", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9619b88c-3b50-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776535272, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776535272, "uuid": "c7a38204-c33a-4316-8509-3646dfa1739f", "comment": "Malware payload", "value": "ba4e6bcc4834a6d0dbbbffe880d94109", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776535272, "uuid": "b6b501c9-3904-4106-b54a-bb129e6511f8", "comment": "Malware payload", "value": "96e275d5eb6b5995b18a673ac2b42b0e17a355e00c737e31fc39167170a7d276", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776535272, "uuid": "5ca859ac-ab22-4077-9ae2-fa047e198142", "value": "T12A24B71E6E228F7EF768873047B78D21A76933D623E1D645E1ACC1105F2429E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776535272, "uuid": "43a0ad4d-462f-42c8-931a-471c5c69c3c3", "value": "3072:HX5VOYpjpM02eM/+7zw40RTCjHhyoN9j6AiSBrbeYI2aeun7gf+:HX54cAeB7zw4+TCjH3R6qBve+aeux", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776535272, "uuid": "abc10b6a-29c5-4f63-9991-abfcf1a590e0", "value": 224940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776535272, "uuid": "8a775b46-0780-48a1-850e-50ed7c31cda3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776538027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776538027, "uuid": "ed0f9dd6-9245-4f72-b934-a6c7ee4df32e", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776538027, "uuid": "5a7921b3-2aec-4d7a-862d-542d28c28b40", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776538027, "uuid": "dba74e91-92fb-492a-80e3-4218c491fa64", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776538027, "uuid": "7c298ca4-4989-4b33-9ae7-8dc44c536a37", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776538027, "uuid": "29b6f155-58c6-4acf-a1a2-802e2228f769", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776544933, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776544933, "uuid": "76bf29ce-d5ee-4029-85b9-bcdf8471c2f3", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776544933, "uuid": "631f70bf-4993-4ec9-9e64-5412ed82be1c", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776544933, "uuid": "70dc93dd-e435-4b51-80bc-c45fe66d11b5", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776544933, "uuid": "19f38075-7909-45f6-95aa-785a8f3ab9ab", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776544933, "uuid": "5009206f-cc88-4977-8716-ff342535b9c2", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91350dce-3b72-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776549867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776549867, "uuid": "b9c3cc8f-98b5-4c73-a041-e7ec16e59868", "comment": "Malware payload", "value": "39e09f6fa7fce8a2f0850f9919901c1d", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776549867, "uuid": "50991cca-0f2b-496d-a4eb-9ec68d182597", "comment": "Malware payload", "value": "bbeaf4b1dfeffd3540646d1d55e26cd94a9e1c52f85d5df6cc9165635be4127d", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776549867, "uuid": "8940659c-ecf4-445e-8af3-f8e6e4211c9f", "value": "T1EC02B03A29EDB55223ABC0E893B53085C28F5CD7C7658EF920FF9E40879AE0442D56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776549867, "uuid": "8ae7f2e6-c620-48a4-bd72-106ce8f2eaef", "value": "192:WdwKsxyHhqVzoBWY1leQ/h524hej6ZpGvAgpF7SZOdW1:uCxUUVefz/v248j6GvAgpo1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776549867, "uuid": "ae29c302-d3e8-423f-abee-d4b89e37160f", "value": 8520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776549867, "uuid": "6e7272ce-bee1-4ab1-a1f9-b5ccfec4ea43", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d133416-3b79-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776552893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776552893, "uuid": "5e375788-96b9-47b1-ba09-e4dfae1d581d", "comment": "Malware payload (Mirai)", "value": "83b09597bbcb6ed5a0e1c316da7fc8c3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776552893, "uuid": "f4cb415c-bc39-465f-adc7-b9e1937c9824", "comment": "Malware payload (Mirai)", "value": "881892e147e4ef678cf772dff7e1e7af1842d4cb21edcb2d44a6e91ae0ef9769", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776552893, "uuid": "5811ecf6-94a1-4a1a-be1e-525ddb5241e5", "value": "T199334B81F9919B02CAC25177FB1E43C9771B139CE2EA7303D929AF21778B46A0E3E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776552893, "uuid": "27b70b7c-8ce0-40f2-aca7-bd8e7c545737", "value": "768:rAzGr5ceqHgulAhgYdwWdVbOmgUh6Vw9sv8xMwDSL9VusvXSxo2Iq:szEiA0AlVbOmlCRhw+L9Isvr21", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776552893, "uuid": "f1304fc7-b31c-4c31-871e-ffc39847a372", "value": 54688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776552893, "uuid": "bad8c7b4-3092-4cb5-b2d6-0724f5ffe526", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25252165-3b7a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776553122, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776553122, "uuid": "9603225c-7b57-4872-9f0d-1599b5417606", "comment": "Malware payload", "value": "264a15d5ccfefbc8d1c3d233b4f72e9f", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776553122, "uuid": "24257d16-7363-49f0-a25f-41329786f1fd", "comment": "Malware payload", "value": "417bafa535cdf4d9bba4d351b3a46f8814e328a8985f6026fcea71c5a011db9f", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776553122, "uuid": "1c11bdc3-1f48-4da6-9e87-f1a17276d3ba", "value": "T188169E1BBCBD5C69C09AB13484736605F664BC051B6317C71AB0F6282F3B3E25ABDB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776553122, "uuid": "6337af27-e8cf-419c-9c96-933a15090881", "value": "f0d62e25a994d1a0a0a530873020bb21", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776553122, "uuid": "3a7165ac-5ed2-4710-8b95-0fdf03f891c7", "value": "49152:3VFrbGm1mC8jGfuZ+RBem2yboYZmXPpv3eDJgracaa/+jXbQc6q:3VATKvcYEpgg5r0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776553122, "uuid": "1930e5e0-1f4b-4a39-ab52-c070c3a3b0df", "value": 4303208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776553122, "uuid": "d5d38a1f-2069-43d2-b44b-794b0ce4bff6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776470413, "uuid": "931cb503-3ab9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://safe-invest5.sylpi6ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776470715, "uuid": "46ec7bac-3aba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.54.161.214:49444/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776470775, "uuid": "6ac194aa-3aba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.122.251:55207/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776470890, "uuid": "af2cde0c-3aba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://global-tax6.sylpi6ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776471369, "uuid": "cc902875-3abb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://art-studio1.tovdo9ral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776472086, "uuid": "783bb543-3abd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://music-band2.tovdo9ral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776472267, "uuid": "e40a8099-3abd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dance-floor3.tovdo9ral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776472746, "uuid": "018b70ae-3abf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cinema-club4.tovdo9ral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776473231, "uuid": "22e7ac43-3ac0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://book-shelf5.tovdo9ral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776473647, "uuid": "1a7c4d4f-3ac1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hobby-time6.tovdo9ral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776473827, "uuid": "863111ba-3ac1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.253.68:54634/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776473828, "uuid": "867360aa-3ac1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.89.244:60868/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776473828, "uuid": "86b40488-3ac1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.59.9:44224/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776473828, "uuid": "86b84981-3ac1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.12.187:35702/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776473828, "uuid": "86ccd2cc-3ac1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.18.219:57547/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776473828, "uuid": "86cdee54-3ac1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.154.130:36406/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776473829, "uuid": "86d9166e-3ac1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.215.17.250:40895/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776473829, "uuid": "86ebd263-3ac1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.7.234.255:42783/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776473949, "uuid": "ceca1fa8-3ac1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.0.219:37531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776474070, "uuid": "16f99c8c-3ac2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://home-style1.k2ymlirem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776474127, "uuid": "38c3939e-3ac2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.30.79.99:54509/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776474426, "uuid": "eb1f0005-3ac2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.186.26:52909/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776474608, "uuid": "5793957c-3ac3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.119.117:45117/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776474611, "uuid": "595e4f8a-3ac3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://modern-room2.k2ymlirem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776474726, "uuid": "9def6aea-3ac3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.186.26:52909/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776474974, "uuid": "314f42ef-3ac4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.95.117:41147/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776475028, "uuid": "5205add2-3ac4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-sofa3.k2ymlirem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776475328, "uuid": "0496ad3b-3ac5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.119.20:43018/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776475447, "uuid": "4b6cb6ea-3ac5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warm-light4.k2ymlirem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776475455, "uuid": "508f08e2-3ac5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.80.79:39470/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776475626, "uuid": "b65713d9-3ac5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.221.192:37406/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776475627, "uuid": "b6a038bd-3ac5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.106.45.20:46120/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776475627, "uuid": "b6d47c04-3ac5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.159.211:33151/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776475628, "uuid": "b7690e16-3ac5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.119.20:43018/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776475634, "uuid": "bac9c74b-3ac5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.0.219:37531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776475876, "uuid": "4aeee552-3ac6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.252.99:33257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776475927, "uuid": "6952120c-3ac6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.248.37.80:48482/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776475927, "uuid": "69bd5a99-3ac6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.248.37.80:48482/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776475931, "uuid": "6c06a6fd-3ac6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://green-plant5.k2ymlirem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476234, "uuid": "205e569e-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.21/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476234, "uuid": "206f2124-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.49.83:49912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476296, "uuid": "45b5c3e9-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.21/arm61", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476296, "uuid": "45bca147-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.21/586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476296, "uuid": "45c63e49-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.21/dss", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476296, "uuid": "45cd057d-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.21/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476296, "uuid": "45cd1331-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.21/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476296, "uuid": "45cd1c98-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.21/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476296, "uuid": "45cd1e46-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.21/co", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476346, "uuid": "6322692c-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.21/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476353, "uuid": "67a473e6-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-window6.k2ymlirem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476412, "uuid": "8a72ba7d-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.95.117:41147/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476527, "uuid": "cf179163-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.67.213.82:38200/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476534, "uuid": "d336f737-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.162.0:53130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476826, "uuid": "8166dcef-3ac8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.67.213.82:38200/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476827, "uuid": "823b7dc9-3ac8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.198.133:57529/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476829, "uuid": "83505b04-3ac8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://auto-care1.povt8aren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776476949, "uuid": "cafac5e2-3ac8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.80.79:39470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776477128, "uuid": "354c2dec-3ac9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.249.211.72:41906/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776477188, "uuid": "58f261f7-3ac9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.122.251:55207/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776477367, "uuid": "c3d68de2-3ac9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://oil-change2.povt8aren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776477375, "uuid": "c883d350-3ac9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.145.199:43109/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776477727, "uuid": "9a6ee869-3aca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.105.172:36974/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776477727, "uuid": "9a8a98d2-3aca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.249.211.72:41906/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776477727, "uuid": "9ab71720-3aca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.219.85:36906/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776477788, "uuid": "bed9065d-3aca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://new-tires3.povt8aren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776478027, "uuid": "4d4313e6-3acb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.219.85:36906/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776478027, "uuid": "4d463dba-3acb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.105.172:36974/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776478269, "uuid": "dd4d0d0c-3acb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://car-wash4.povt8aren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776478326, "uuid": "ffcde197-3acb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.22.180:43362/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776478327, "uuid": "ffd99239-3acb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.22.180:43362/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776478576, "uuid": "948dcb8a-3acc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.193.181:53299/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776478988, "uuid": "8a4f1d6d-3acd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-drive5.povt8aren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776479047, "uuid": "ad61253d-3acd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.145.199:43109/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776479169, "uuid": "f5dd2034-3acd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://road-trip6.povt8aren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776479225, "uuid": "177281c3-3ace-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.106.45.20:46120/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776479225, "uuid": "17729012-3ace-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.26.86.218:57084/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776479225, "uuid": "17a082ba-3ace-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.114.50:60945/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776479475, "uuid": "ac4e4f2f-3ace-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.246.71:50610/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776479588, "uuid": "eff86f68-3ace-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sky-view1.wimso4rel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776479715, "uuid": "3b68a207-3acf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.226.10.165:44977/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776480065, "uuid": "0bef0012-3ad0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-cloud2.wimso4rel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776480312, "uuid": "9f1be837-3ad0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.248.44.253:54683/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776480367, "uuid": "c02aed67-3ad0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.111.60:54152/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776480427, "uuid": "e38aa392-3ad0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.253.209:33143/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776480549, "uuid": "2c3de90a-3ad1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sun-light3.wimso4rel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776480856, "uuid": "e3af02e5-3ad1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.215.152:40329/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776480967, "uuid": "259d73b4-3ad2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rain-drop4.wimso4rel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776481026, "uuid": "48d2bcca-3ad2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.59.9:44224/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776481026, "uuid": "48db2358-3ad2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.164:60118/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776481152, "uuid": "93e8777c-3ad2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.248.44.253:54683/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776481216, "uuid": "b9eacc23-3ad2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.166.104:36784/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776481276, "uuid": "ddbe88af-3ad2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.60.13:46446/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776481327, "uuid": "fc1f1ac9-3ad2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.134.141:58243/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776481327, "uuid": "fc4c97cb-3ad2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.30.79.99:54509/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776481510, "uuid": "69571d5a-3ad3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://snow-fall5.wimso4rel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776481812, "uuid": "1d89f99f-3ad4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.126.233:43434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776481987, "uuid": "8586fe0c-3ad4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.18.152:50225/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776481988, "uuid": "86483613-3ad4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wind-speed6.wimso4rel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776482238, "uuid": "1b6632f8-3ad5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.68.198:35382/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776482348, "uuid": "5ca66382-3ad5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.60.13:46446/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776482412, "uuid": "83346378-3ad5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tech-tool1.dexpor1el.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776482525, "uuid": "c6730318-3ad5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.147.200:44176/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776482534, "uuid": "cbc288ec-3ad5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.65.9:54680/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776482594, "uuid": "ef4685f9-3ad5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.164:60118/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483073, "uuid": "0cea11a4-3ad7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smart-app2.dexpor1el.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483246, "uuid": "741b0f59-3ad7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.118.209.172:57426/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483547, "uuid": "27919dfa-3ad8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://web-site3.dexpor1el.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483730, "uuid": "94bdc79d-3ad8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-code4.dexpor1el.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483792, "uuid": "b9c9aff9-3ad8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.65.9:54680/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483911, "uuid": "002be183-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.188.207/AB4g5/Josho.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483911, "uuid": "002ce1a2-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.188.207/AB4g5/Josho.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483911, "uuid": "002ce545-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.188.207/AB4g5/Josho.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483911, "uuid": "004343b4-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.188.207/AB4g5/Josho.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483911, "uuid": "00475704-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.188.207/AB4g5/Josho.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483911, "uuid": "004c9c11-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.188.207/AB4g5/Josho.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483911, "uuid": "005160b6-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.188.207/AB4g5/Josho.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483911, "uuid": "00628a26-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.188.207/AB4g5/Josho.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483911, "uuid": "00628c2d-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.188.207/AB4g5/Josho.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483911, "uuid": "00628ce8-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.188.207/AB4g5/Josho.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776483971, "uuid": "24480266-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.188.207/AB4g5/Josho.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776484027, "uuid": "4557a138-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.120.208:53084/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776484029, "uuid": "469edb24-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.83.2.247:50833/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776484029, "uuid": "47067645-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.184.36:39972/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776484036, "uuid": "4af641ce-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.135.20:39138/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776484148, "uuid": "8deb7ba4-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-base5.dexpor1el.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776484216, "uuid": "b60c031e-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.154.130:36406/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776484275, "uuid": "d93b7700-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.135.20:39138/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776484635, "uuid": "afb7be17-3ada-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.86.252:37966/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776484693, "uuid": "d2b23aa0-3ada-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloud-node6.dexpor1el.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776484935, "uuid": "62959521-3adb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.118.209.172:57426/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485114, "uuid": "cd67f31a-3adb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fruit-box1.bovdalen7.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485227, "uuid": "10ecca53-3adc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.93.100:50346/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485535, "uuid": "c8b374ae-3adc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.128.196:34465/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485587, "uuid": "e791f7a4-3adc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173/x.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485588, "uuid": "e7cb77b2-3adc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173.ptr.pfcloud.network/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485588, "uuid": "e7fbaf3c-3adc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173.ptr.pfcloud.network/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485597, "uuid": "ed1c949d-3adc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173.ptr.pfcloud.network/x.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485597, "uuid": "ed28077a-3adc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173.ptr.pfcloud.network/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485597, "uuid": "ed351421-3adc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173.ptr.pfcloud.network/arc", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485597, "uuid": "ed9f8482-3adc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173.ptr.pfcloud.network/arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485648, "uuid": "0bc41c26-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://apple-pie2.bovdalen7.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485649, "uuid": "0c222570-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173.ptr.pfcloud.network/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485649, "uuid": "0c3112e0-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173.ptr.pfcloud.network/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485649, "uuid": "0c34219e-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173.ptr.pfcloud.network/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485653, "uuid": "0e82c910-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173.ptr.pfcloud.network/arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485656, "uuid": "10424955-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173.ptr.pfcloud.network/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485658, "uuid": "11ccaa54-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173.ptr.pfcloud.network/arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485828, "uuid": "775be1ec-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/alyssaai586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485828, "uuid": "775d6a39-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/alyssaaarm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485829, "uuid": "7763baaf-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/alyssaampsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485829, "uuid": "77685b5a-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.82.204:38990/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485829, "uuid": "7768e011-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/alyssaam68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485829, "uuid": "776fb495-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/alyssaai486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "79fc9f61-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.21/sex.sh", "Tag": [ { "name": "85-11-167-21", "colour": "#1df840", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "79fdc6a0-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/alyssaaarm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "7a0064d9-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/alyssaaarm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "7a0a49cd-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.21/dc", "Tag": [ { "name": "85-11-167-21", "colour": "#1df840", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "7a2ceec2-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.21/mips", "Tag": [ { "name": "85-11-167-21", "colour": "#1df840", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "7a2e6be0-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/alyssaappc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "7a2e70d1-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/alyssaamips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "7a324ae3-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/alyssaai686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776485833, "uuid": "7a324fb9-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/alyssaaarm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776486008, "uuid": "e2872a94-3add-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sweet-cake3.bovdalen7.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776486068, "uuid": "062eafab-3ade-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.66.169:59140/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776486132, "uuid": "2c6df077-3ade-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225:1337", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "nc", "colour": "#87EA4E", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776486132, "uuid": "2c6f2939-3ade-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225:9999", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "nc", "colour": "#87EA4E", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776486493, "uuid": "033ab1b7-3adf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cool-milk4.bovdalen7.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776486727, "uuid": "8eeb10e1-3adf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.125.53:33301/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776486729, "uuid": "8ff07a01-3adf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.18.219:57547/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776486797, "uuid": "b8989877-3adf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.112.57/dips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776486973, "uuid": "217cfb45-3ae0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hot-soup5.bovdalen7.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487388, "uuid": "19060608-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tasty-bun6.bovdalen7.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "1bf40706-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.248.102.107/n2/armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "1bf734a7-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.248.102.107/n2/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "1bf9d12f-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.248.102.107/n2/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "1bf9d7ae-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.248.102.107/n2/armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "1bfbcb4a-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.248.102.107/n2/aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "1c043b5e-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.248.102.107/n2/armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "1c06c8bf-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.248.102.107/n2/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "1c0e3e2d-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.248.102.107/n2/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487393, "uuid": "1c110e21-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.248.102.107/n2/mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487687, "uuid": "cb33f6a9-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.203.84:53522/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487691, "uuid": "cd94d37f-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.173.241:55537/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487808, "uuid": "13195d70-3ae2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.93.100:50346/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487867, "uuid": "3677ff21-3ae2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.85.99.217:38787/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776487935, "uuid": "5ed75019-3ae2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clean-sea1.qi5mlixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776488288, "uuid": "317e8446-3ae3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.228.157.130/diicot.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776488418, "uuid": "7e8e1c88-3ae3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sand-beach2.qi5mlixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776488650, "uuid": "090153ab-3ae4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.60.61.176:8080/dlr.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776488650, "uuid": "0905dd2f-3ae4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.60.61.176:8080/dlr.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776488660, "uuid": "0f2a586c-3ae4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.60.61.176:8080/dlr.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776488767, "uuid": "4ef3e58f-3ae4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://palm-tree3.qi5mlixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776488775, "uuid": "53b549d9-3ae4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.10.45.103:54405/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776489074, "uuid": "0601e7fc-3ae5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.233.123:52329/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776489186, "uuid": "48d9eebc-3ae5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.202.243.118/n2/armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776489186, "uuid": "48d9f81d-3ae5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.202.243.118/n2/armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776489186, "uuid": "48d9fb59-3ae5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.202.243.118/n2/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776489186, "uuid": "48da0522-3ae5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.202.243.118/n2/armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776489186, "uuid": "48da0c3a-3ae5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.202.243.118/n2/armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776489186, "uuid": "48da0c6a-3ae5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.202.243.118/n2/mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776489186, "uuid": "48da0fcf-3ae5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.202.243.118/n2/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776489186, "uuid": "48da18e9-3ae5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.202.243.118/n2/aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776489186, "uuid": "48da1ea0-3ae5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.202.243.118/n2/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776489254, "uuid": "712754d0-3ae5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://island-trip4.qi5mlixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776489489, "uuid": "fd01ee59-3ae5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.227.243:53192/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776489614, "uuid": "47bd2f26-3ae6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/bins/sora.x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776489669, "uuid": "687059a5-3ae6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.233.123:52329/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776489729, "uuid": "8c196c7b-3ae6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://boat-tour5.qi5mlixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776489976, "uuid": "1f415522-3ae7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.222.8:44027/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776490209, "uuid": "aa61c857-3ae7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.157.18.236:54022/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776490329, "uuid": "f1a463ed-3ae7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.4.218:44733/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776490453, "uuid": "3bfd7282-3ae8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ship-yard6.qi5mlixar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776490627, "uuid": "a3be03e6-3ae8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://central-park1.4zomiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776490814, "uuid": "12b52713-3ae9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.222.8:44027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776491054, "uuid": "a1f4e65a-3ae9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://metro-station2.4zomiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776491056, "uuid": "a3433ece-3ae9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.227.243:53192/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776491472, "uuid": "9adefafa-3aea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://city-tower3.4zomiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776491771, "uuid": "4d3e3a2c-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://street-light4.4zomiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776491890, "uuid": "946b132d-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.175.166:45571/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776491954, "uuid": "ba26b43b-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/hiddenbin/Space.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776491954, "uuid": "ba2f6403-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/hiddenbin/Space.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492011, "uuid": "dc57e6e8-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/hiddenbin/Space.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492011, "uuid": "dc580928-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/hiddenbin/Space.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492011, "uuid": "dca9343a-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/hiddenbin/Space.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492013, "uuid": "ddc6eca7-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/hiddenbin/Space.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492014, "uuid": "ddf818bf-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/hiddenbin/Space.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492014, "uuid": "ddfdc517-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/hiddenbin/Space.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492014, "uuid": "ddfdd774-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/hiddenbin/Space.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492014, "uuid": "de100b68-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/hiddenbin/Space.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492014, "uuid": "de14645f-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/hiddenbin/Space.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492014, "uuid": "de18df38-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/hiddenbin/Space.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492014, "uuid": "de227e5b-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/hiddenbin/Space.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492016, "uuid": "df2ccbda-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/hiddenbin/Space.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492076, "uuid": "0338ca34-3aec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.253.40:41341/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492190, "uuid": "46edab02-3aec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-bridge5.4zomiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492608, "uuid": "4070ee00-3aed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://night-road6.4zomiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776492789, "uuid": "abe7fa46-3aed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.228.6:45482/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493027, "uuid": "39fb5e17-3aee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.253.68:54634/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493147, "uuid": "814918d7-3aee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.33.91:57739/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493328, "uuid": "ed289f2e-3aee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/bins/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493385, "uuid": "0f38ea58-3aef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/bins/sora.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493386, "uuid": "0fd1376d-3aef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/bins/sora.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493389, "uuid": "1194d854-3aef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hand-tool1.rax8mivel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493391, "uuid": "13133d61-3aef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/bins/sora.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493391, "uuid": "1313c8df-3aef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/bins/sora.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493391, "uuid": "1313f8b4-3aef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/bins/sora.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493391, "uuid": "13188357-3aef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/bins/sora.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "144fcee6-3aef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "144fec21-3aef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "1450119b-3aef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/bins/sora.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "14505ad3-3aef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "145068fb-3aef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/bins/sora.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "14509270-3aef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "14509624-3aef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/bins/sora.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493393, "uuid": "1450a4d0-3aef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/bins/sora.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493453, "uuid": "380ca6b5-3aef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.171:34909/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493568, "uuid": "7c76df7d-3aef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://power-drill2.rax8mivel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493576, "uuid": "814c4e15-3aef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.114.193:48581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493632, "uuid": "a2652c5f-3aef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.25.89:55774/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493695, "uuid": "c827810f-3aef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.218.150:43027/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776493992, "uuid": "79333b5b-3af0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.108.146.151:39609/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776494049, "uuid": "9b11434c-3af0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sharp-saw3.rax8mivel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776494228, "uuid": "0595866f-3af1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.227.220:42997/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776494528, "uuid": "b8cdb790-3af1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.89.244:60868/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776494531, "uuid": "ba54c07b-3af1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://metal-bolt4.rax8mivel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776494893, "uuid": "926982d8-3af2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.253.40:41341/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776495015, "uuid": "db1a8062-3af2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wood-glue5.rax8mivel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776495127, "uuid": "1dc63585-3af3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.102.151:60455/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776495127, "uuid": "1dd01b6a-3af3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.152.109:54081/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776495133, "uuid": "217b5cfe-3af3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.126.233:43434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776495195, "uuid": "45f26405-3af3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.108.146.151:39609/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776495247, "uuid": "657c265b-3af3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.114.193:48581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776495371, "uuid": "aef1ee8a-3af3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://work-bench6.rax8mivel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776495427, "uuid": "d0990044-3af3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.25.89:55774/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776495553, "uuid": "1bd4187f-3af4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.218.150:43027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776495908, "uuid": "ef72291a-3af4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-cargo1.sy7loden.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776496092, "uuid": "5d2dcf23-3af5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.189.41:35476/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776496328, "uuid": "e996f86f-3af5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://heavy-truck2.sy7loden.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776496626, "uuid": "9b5d2d2f-3af6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.227.220:42997/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776496747, "uuid": "e3398a03-3af6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ship-port3.sy7loden.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776496926, "uuid": "4df84424-3af7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.1.162:54280/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497176, "uuid": "e3431368-3af7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.160.191.219:53118/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497290, "uuid": "270ab565-3af8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://air-flight4.sy7loden.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497712, "uuid": "2284a1f6-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://box-pack5.sy7loden.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497777, "uuid": "497257d5-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.189.41:35476/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497827, "uuid": "66d0c46a-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.187.101.203:37039/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497827, "uuid": "6732307e-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.238.27.138:54880/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497828, "uuid": "67725a2e-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.52.242.125:44102/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497828, "uuid": "67743de3-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.247.124:44677/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497828, "uuid": "677e72a0-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.221.59:55225/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497828, "uuid": "677e75ad-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.221.59:55225/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497828, "uuid": "67e4f24b-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.190.55:59508/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497828, "uuid": "67e7fa9b-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.201.157.212:55247/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497829, "uuid": "680a3cd0-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.190.55:59508/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497829, "uuid": "680e4021-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.94.186:56232/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497829, "uuid": "68106336-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.130.166.202:37717/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497829, "uuid": "6812ac66-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.234.90.144:43115/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497829, "uuid": "681771d8-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.227.23:32919/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497829, "uuid": "68187538-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.90.174:38676/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497829, "uuid": "68235c13-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.237.6.248:41787/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497829, "uuid": "682fecc1-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.43.21.116:40105/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497831, "uuid": "696c32e6-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.81.103.95:36295/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497834, "uuid": "6b682463-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.81.103.95:36295/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497848, "uuid": "73be0422-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.212.104.146:45880/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497887, "uuid": "8aa61281-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.238.27.138:54880/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497887, "uuid": "8ab0fa2a-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.21.70.189:49079/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497888, "uuid": "8b1f8d40-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.147.82.88:48559/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497888, "uuid": "8b35ea1a-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.196.223:35204/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497888, "uuid": "8b54df35-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.157.253.209:45483/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497888, "uuid": "8b55b117-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.236.74.65:37550/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497888, "uuid": "8b69ea36-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.250.121:38900/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497888, "uuid": "8b7ef245-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://98.167.107.155:44344/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497888, "uuid": "8b82d12a-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.43.21.116:40105/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497888, "uuid": "8b8d4ed2-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.253.145:56653/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497888, "uuid": "8b8d5a91-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.94.186:56232/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497889, "uuid": "8bcf91e7-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.198.34:56863/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497889, "uuid": "8bdb56c6-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.59.136:60927/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497889, "uuid": "8be7c0ab-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.235.128:44068/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497889, "uuid": "8bf309ea-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.141.21:43524/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497889, "uuid": "8bf54f79-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.12.40.94:51484/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497889, "uuid": "8bfae25e-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.176.39:48200/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497889, "uuid": "8bfdc265-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.17.198:41296/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497889, "uuid": "8c097dff-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.184.149.21:50751/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497889, "uuid": "8c0baf74-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.74.162:60415/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497907, "uuid": "96d39593-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.86.106:34212/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497948, "uuid": "aeed6d0d-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.236.74.65:37550/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497951, "uuid": "b0e0f59b-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.204.105:60149/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497951, "uuid": "b10d72b5-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.184.149.21:50751/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497952, "uuid": "b14f0f23-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.35.106:44418/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497952, "uuid": "b1604cc9-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.237.6.248:41787/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497952, "uuid": "b162e109-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.159.74.226:22142/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497952, "uuid": "b1636904-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.168.196:55366/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497952, "uuid": "b16764d5-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.10.45.103:54405/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497952, "uuid": "b16fc3a4-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.50.174:48914/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497952, "uuid": "b185636c-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.59.136:60927/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497952, "uuid": "b18bb3e3-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.196.223:35204/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497952, "uuid": "b19f571a-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.215.17.250:40895/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497952, "uuid": "b1a3fede-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.226.238.62:54035/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497952, "uuid": "b1a5bfc0-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.226.238.62:54035/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497952, "uuid": "b1a73b87-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.38.79.118:58523/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497952, "uuid": "b1c3e6c2-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.211.44.179:42645/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497953, "uuid": "b1e39f3c-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.197.0:45537/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497953, "uuid": "b1e6c7f6-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.221.88:36078/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497953, "uuid": "b1e8c853-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.167.2.100:51566/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497953, "uuid": "b1f01a95-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.39.253:43067/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497953, "uuid": "b1f08153-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.195.25:46636/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497953, "uuid": "b1f08ddd-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.85.194:44074/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497953, "uuid": "b1f44f1e-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.39.253:43067/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497953, "uuid": "b207a4da-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.253.184:58047/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497954, "uuid": "b2ecfbbf-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.242.55:53534/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497956, "uuid": "b3d0296a-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.242.55:53534/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497962, "uuid": "b79e415d-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.243.140.215:33668/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776497967, "uuid": "ba4ec8a6-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.243.140.215:33668/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776498006, "uuid": "d1fcb7eb-3af9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.147.82.88:48559/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776498129, "uuid": "1b4e8482-3afa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://store-house6.sy7loden.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776498189, "uuid": "3e8f1660-3afa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.248.19.209:54174/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776498189, "uuid": "3e9368d4-3afa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.248.19.209:54174/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776498613, "uuid": "3bb393af-3afb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://video-clip1.to3varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776498912, "uuid": "edef2656-3afb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.88.34:54653/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776499087, "uuid": "564d25f8-3afc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sound-mix2.to3varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776499093, "uuid": "59e3ee9d-3afc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.95.229:51202/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776499094, "uuid": "5a5c4607-3afc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.42.55:57811/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776499568, "uuid": "74b42d61-3afd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://film-edit3.to3varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776499988, "uuid": "6f1958b2-3afe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://photo-shot4.to3varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776499995, "uuid": "73559f48-3afe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.26.177:55585/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776500228, "uuid": "fde43235-3afe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.34:51002/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776500294, "uuid": "2570d658-3aff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.15.110:34786/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776500410, "uuid": "6a7a70d1-3aff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://media-link5.to3varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776500473, "uuid": "901687cc-3aff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.34:51002/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776500836, "uuid": "68980995-3b00-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.197.177:56830/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776500888, "uuid": "87a33163-3b00-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://live-feed6.to3varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776501010, "uuid": "d05901e8-3b00-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.51.10:59125/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776501075, "uuid": "f6dd95c7-3b00-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.10.86:51635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776501317, "uuid": "86fbae7f-3b01-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.26.177:55585/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776501370, "uuid": "a6f83b67-3b01-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solar-light1.kymli2rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776501550, "uuid": "11d68676-3b02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.219.51:51248/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776501674, "uuid": "5bd99b80-3b02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.89.212:57930/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776501675, "uuid": "5c793a7b-3b02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.25.44:45106/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776501792, "uuid": "a2a4addd-3b02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.219.51:51248/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776501847, "uuid": "c2e9e4de-3b02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wind-farm2.kymli2rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502027, "uuid": "2e477974-3b03-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.8.2:37503/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502090, "uuid": "541679bf-3b03-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.114.123:60944/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502155, "uuid": "7a720acc-3b03-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.2.23:54679/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502269, "uuid": "be909d21-3b03-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://green-heat3.kymli2rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502626, "uuid": "9382c57b-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.172/all.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502626, "uuid": "93a1f246-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://filebin.net/5mszlflcu1n04xb4/cag54tgv8n", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502628, "uuid": "948fd534-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/bins.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502628, "uuid": "949d25fc-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.158.206.47:52010/Mozi.m", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502628, "uuid": "94a80e28-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/Demon.ppc440fp", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502628, "uuid": "94b8481e-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/Demon.sh4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502628, "uuid": "94bba5ba-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/Demon.mips", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502628, "uuid": "94bde3c4-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/Demon.mpsl", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502628, "uuid": "94c017b9-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/Demon.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502628, "uuid": "94c1e56b-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.158.206.47:52010/config", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502630, "uuid": "95ab73b7-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.47.188:56925/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502641, "uuid": "9c32e1d3-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.254/skid.mips", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502643, "uuid": "9d74babc-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.254/skid.ppc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502687, "uuid": "b7ddff02-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.103.215/haker.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502687, "uuid": "b7e561dd-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.92.154.210:31395/Mozi.m", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502690, "uuid": "b9930909-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.131.200.170:1794/mozi.m", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502690, "uuid": "b9b8fccb-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.131.200.170:1794/Mozi.a", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502690, "uuid": "b9d2110e-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.131.200.170:1794/config", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "ba0fa7eb-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.92.154.210:31395/config", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "ba1cd8f6-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.92.154.210:31395/mozi.a", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "ba314801-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/Demon.i586", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "ba3c0dff-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.158.206.47:52010/mozi.a", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "ba481645-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/Demon.arm4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "ba4c0c1f-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/Demon.sparc", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "ba4c3219-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/Demon.arm7", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "ba4c38f9-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/Demon.ppc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "ba51225a-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/Demon.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "ba538082-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.110.247.62/main_arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "ba566574-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/Demon.i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "ba5ae4b6-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/Demon.m68k", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "ba6737bb-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/Demon.arm6", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "ba6bc952-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.110.247.62/main_arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502691, "uuid": "ba6f5bad-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.110.247.62/main_m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502692, "uuid": "bab20aa2-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.218.194.106/l_mips", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502692, "uuid": "bab7fe8c-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.218.194.106/l_arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502696, "uuid": "bcf1db99-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.10.86:51635/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502701, "uuid": "bffae19f-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.254/skid.sparc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502701, "uuid": "bffaea9a-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.254/skid.mpsl", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502701, "uuid": "bffb8898-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.254/skid.x86", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502701, "uuid": "c00ad696-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.254/skid.arm5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502701, "uuid": "c023d4db-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.254/skid.arm6", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502701, "uuid": "c0426e21-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.254/skid.arm4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776502753, "uuid": "def2f08f-3b04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://eco-power4.kymli2rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776503118, "uuid": "b8b18bc1-3b05-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.153:41146/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776503228, "uuid": "fa368b35-3b05-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pure-energy5.kymli2rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776503538, "uuid": "b2d3de27-3b06-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.15.110:34786/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776503652, "uuid": "f6e75d8e-3b06-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.162.0:53130/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776503716, "uuid": "1d3c19cb-3b07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clean-tech6.kymli2rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776503897, "uuid": "893bdd73-3b07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.2.23:54679/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776503959, "uuid": "ae2c7e24-3b07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.50.71.149:48916/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776504068, "uuid": "eed79333-3b07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wild-life1.po9vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776504372, "uuid": "a46c41b5-3b08-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deep-sea2.po9vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776504427, "uuid": "c50f6897-3b08-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.173.241:55537/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776504432, "uuid": "c82e3582-3b08-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.153:41146/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776504432, "uuid": "c8314d2c-3b08-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.52.93:36860/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776504729, "uuid": "78ff0b8b-3b09-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.89.164.173:37039/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776504847, "uuid": "bf5b9c06-3b09-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://high-hill3.po9vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776505327, "uuid": "dd3ae86d-3b0a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.59.177:56767/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776505328, "uuid": "de100e6a-3b0a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-field4.po9vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776505329, "uuid": "de8e1149-3b0a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.177.251.31:45986/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776505530, "uuid": "56a4e576-3b0b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.249.199.1:53879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776505813, "uuid": "feee3b48-3b0b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cold-ice5.po9vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776506467, "uuid": "85163099-3b0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-lake6.po9vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776506648, "uuid": "f0d6dbee-3b0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://game-mode1.wi5msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776507068, "uuid": "eb3758d9-3b0e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://top-play2.wi5msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776507089, "uuid": "f7938c3e-3b0e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.249.199.1:53879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776507128, "uuid": "0e9b60b4-3b0f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.49.213.85:40745/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776507188, "uuid": "328aaab2-3b0f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.93.182:56503/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776507433, "uuid": "c48e704d-3b0f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.237.235:45466/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776507550, "uuid": "0a3955bc-3b10-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-score3.wi5msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776507618, "uuid": "32cfedae-3b10-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.148.65:54393/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776507796, "uuid": "9cd09d49-3b10-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.226.10.165:44977/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776508030, "uuid": "283cb8af-3b11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.20.85:40051/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776508039, "uuid": "2db0f069-3b11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-move4.wi5msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776508046, "uuid": "31bc3c64-3b11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.80.59:40184/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776508105, "uuid": "55001f87-3b11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.143.17:35279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776508327, "uuid": "d9b515d7-3b11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.237.235:45466/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776508515, "uuid": "49bec4b3-3b12-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://team-win5.wi5msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776508523, "uuid": "4e2a2797-3b12-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.227.182:42377/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776508627, "uuid": "8c981e8a-3b12-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.59.177:56767/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776508934, "uuid": "439cc8f9-3b13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://new-level6.wi5msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776509069, "uuid": "9410db04-3b13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.36.118.239:53826/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776509118, "uuid": "b1004951-3b13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.36.118.239:53826/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776509119, "uuid": "b16823f8-3b13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.216.204:51513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776509366, "uuid": "44f877a1-3b14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.199.80:45710/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776509415, "uuid": "6217b9b0-3b14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://web-blog1.de8xporel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776509832, "uuid": "5a8ec0f1-3b15-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://news-feed2.de8xporel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776509841, "uuid": "6025616e-3b15-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.42.55:57811/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776509962, "uuid": "a81d6ca7-3b15-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.51.10:59125/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776510309, "uuid": "76d4ef23-3b16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://post-card3.de8xporel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776510557, "uuid": "0afc8bde-3b17-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.166.188.48:34864/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776510670, "uuid": "4e10add3-3b17-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://site-map4.de8xporel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776510733, "uuid": "73d9eda3-3b17-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.4.244:60762/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776511103, "uuid": "5041b4ae-3b18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.216.204:51513/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776511210, "uuid": "9011b945-3b18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://user-info5.de8xporel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776511632, "uuid": "8b901a6c-3b19-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://page-link6.de8xporel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776511751, "uuid": "d24c3a8a-3b19-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://xrplnode.dev/install", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "ua-ps", "colour": "#32D6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776511999, "uuid": "66301369-3b1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://insureongo.net/armistixconp.zip", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776512049, "uuid": "83e8f0ef-3b1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://home-chef1.bov7larex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776512050, "uuid": "84aecd51-3b1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cnpaintequipment.com/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "ua-ps", "colour": "#32D6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776512587, "uuid": "c4bf334a-3b1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-food2.bov7larex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776512836, "uuid": "5961028c-3b1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.199.80:45710/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776512903, "uuid": "81437483-3b1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.76.52:43331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776513022, "uuid": "c7af7981-3b1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.76.52:43331/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776513071, "uuid": "e50a1ea4-3b1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sweet-pie3.bov7larex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776513259, "uuid": "5574ef4f-3b1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.54.52.122:40553/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776513322, "uuid": "7a99d516-3b1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.207:51914/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776513493, "uuid": "e070ee3e-3b1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hot-grill4.bov7larex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776513975, "uuid": "ffc3fb4b-3b1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cool-mint5.bov7larex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776514220, "uuid": "92016d6c-3b1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.50.71.149:48916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776514390, "uuid": "f74e0e5d-3b1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tasty-ham6.bov7larex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776514449, "uuid": "1a736f37-3b20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.135.20:60119/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776514628, "uuid": "8530da4a-3b20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.195.7.105:40595/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776514702, "uuid": "b10d8a60-3b20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.4.155:43883/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776514756, "uuid": "d163e51f-3b20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.207:51914/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776514756, "uuid": "d1c9a1ff-3b20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.54.52.122:40553/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776514930, "uuid": "3906a574-3b21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shop-list1.qimor6xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776514950, "uuid": "44fbe0e3-3b21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.227.85:60753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776515177, "uuid": "cc800546-3b21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.134.141:58243/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776515238, "uuid": "f114b0b3-3b21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.152.109:54081/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776515352, "uuid": "34af032f-3b22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sale-price2.qimor6xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776515770, "uuid": "2e217973-3b23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gift-item3.qimor6xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776515827, "uuid": "4fcf4aee-3b23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.97.72:50487/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776516129, "uuid": "0422974e-3b24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.170.136.155:60886/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776516247, "uuid": "4a68c7e0-3b24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://new-stock4.qimor6xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776516427, "uuid": "b5b6cc7e-3b24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.195.7.105:40595/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776516427, "uuid": "b5bd1bb3-3b24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.0.193:51201/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776516438, "uuid": "bc392af8-3b24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.4.155:43883/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776516728, "uuid": "68efb308-3b25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-deal5.qimor6xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776517150, "uuid": "644c1bbc-3b26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://low-cost6.qimor6xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776517627, "uuid": "80925f12-3b27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.97.72:50487/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776517690, "uuid": "a62ebbd1-3b27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lowa.qimor6xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776517819, "uuid": "f315e00b-3b27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.170.136.155:60886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776517868, "uuid": "1072d52e-3b28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://asdf.qimor6xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776518047, "uuid": "7b2eca68-3b28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sub-the0.8zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776518050, "uuid": "7ce2f1d0-3b28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.67.103.35:46835/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776518119, "uuid": "a611a689-3b28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.195.25:46636/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776518234, "uuid": "ea48c974-3b28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.97.209:59894/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776518408, "uuid": "525f3d9a-3b29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://52hb.8zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776518896, "uuid": "75039e9d-3b2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://layoutcrawle.8zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776519013, "uuid": "bb007c51-3b2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.97.173.12:8000/bot_mipsle", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776519021, "uuid": "bfaee50a-3b2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://filebin.net/lowoyel91h576uav/cag54tgv8n", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776519371, "uuid": "8ff6d71c-3b2b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sri4.8zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776519738, "uuid": "6aec17ac-3b2c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.129.211.113:35924/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776519739, "uuid": "6ba2eee8-3b2c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.67.103.35:46835/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776519849, "uuid": "ad62dd27-3b2c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://talcoreos.8zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776520220, "uuid": "8a1612eb-3b2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.236:32928/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776520271, "uuid": "a8da8afe-3b2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://2gxb0vyl.8zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776520327, "uuid": "ca05c2d9-3b2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.224.101:41959/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776520580, "uuid": "60e0618b-3b2e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.42.99:41179/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776520644, "uuid": "86f2816e-3b2e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.51.153:37929/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776520754, "uuid": "c895a022-3b2e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-via1.ra5xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776520820, "uuid": "efae32b3-3b2e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.91.238:47673/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776520943, "uuid": "392e402b-3b2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.71.31.7:48002/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776521170, "uuid": "c0cca058-3b2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://broker-plate.ra5xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776521237, "uuid": "e8b650ff-3b2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.91.238:47673/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776521478, "uuid": "78077136-3b30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.236:32928/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776521479, "uuid": "789e90ce-3b30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.149.92:54741/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776521652, "uuid": "df97cfc6-3b30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bluhz.ra5xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776522021, "uuid": "bb81845d-3b31-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.89.164.173:37039/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776522132, "uuid": "fdc84aee-3b31-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://3wteeo.ra5xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776522249, "uuid": "43ce2811-3b32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.42.99:41179/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776522547, "uuid": "f5290041-3b32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://veldraex9.ra5xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776522677, "uuid": "42e8a89c-3b33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.161.220:54617/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776523029, "uuid": "14d6d474-3b34-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stab7-sheet.ra5xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776523330, "uuid": "c8383a65-3b34-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.64.233.167:4593/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776523448, "uuid": "0e1779ae-3b35-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rwwolv22.sylo3rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776523938, "uuid": "32651359-3b36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.221.62:40576/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776523989, "uuid": "50eb275c-3b36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://watch-signal.sylo3rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776524227, "uuid": "dec3f8c8-3b36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.6.169:56221/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776524227, "uuid": "dee252da-3b36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.169.214:35752/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776524236, "uuid": "e3ee0d91-3b36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.161.220:54617/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776524410, "uuid": "4bdbcfa1-3b37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sx9v1.sylo3rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776524479, "uuid": "74f5d8b0-3b37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.253.241:49522/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776524891, "uuid": "6a688e9f-3b38-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://6a00327.sylo3rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776524897, "uuid": "6e1ab1dd-3b38-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/O.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776525128, "uuid": "f76e1a7b-3b38-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.157.39:33156/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776525369, "uuid": "871f2d37-3b39-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://1e4r-span.sylo3rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776525792, "uuid": "8388b10a-3b3a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mer-draet.sylo3rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776525800, "uuid": "88044c3a-3b3a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.253.241:49522/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776525910, "uuid": "c992b39f-3b3a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.9.222:57297/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526026, "uuid": "0f1ba2b3-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.169.214:35752/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526026, "uuid": "0f293f89-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.6.169:56221/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526215, "uuid": "7fc9f17a-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/FBI.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526220, "uuid": "825d344a-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/FBI.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526222, "uuid": "838a450a-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/FBI.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526222, "uuid": "838a5d44-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/FBI.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526222, "uuid": "838a6064-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/FBI.ppc-440fp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526222, "uuid": "84023c2b-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/FBI.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526223, "uuid": "84429412-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/FBI.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526223, "uuid": "8442bf3c-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/FBI.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526224, "uuid": "84ff9eea-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/FBI.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526224, "uuid": "84ffc7e3-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/FBI.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526225, "uuid": "857ea7f6-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/FBI.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526271, "uuid": "a1427c9a-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://atom0-bridge.to7vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526280, "uuid": "a6303c89-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/FBI.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526280, "uuid": "a630954a-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/FBI.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526280, "uuid": "a630a8c7-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/FBI.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526280, "uuid": "a630b0f9-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/FBI.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526280, "uuid": "a630cdc1-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/FBI.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526339, "uuid": "c9c77241-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.80.189:43465/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526521, "uuid": "360e2e15-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.216.18:52636/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526627, "uuid": "74f6c82f-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/mpsl", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526627, "uuid": "74f90a67-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173/i686", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526627, "uuid": "74f93055-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173/arm5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526627, "uuid": "75106ce8-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173.ptr.pfcloud.network/i686", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526627, "uuid": "751d0d92-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.173.ptr.pfcloud.network/arm5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526630, "uuid": "76d66cb5-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.87.7.5/lll", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526631, "uuid": "7745a016-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/run.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "9da51af3-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.216.18:52636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "9dba9f25-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnor1kxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "9dbadb00-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnsh2xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "9dbb42c5-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxni386xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "9dbbe569-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "9dc2ac8a-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "9dc3e6ea-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "9dc92618-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526695, "uuid": "9dc96c64-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnm68kxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526698, "uuid": "9faed129-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526698, "uuid": "9faff531-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnmipsxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526700, "uuid": "a07386e7-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnsh4xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526747, "uuid": "bc76bd5e-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://c4rry-index.to7vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526758, "uuid": "c32c881e-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776526758, "uuid": "c32c8c34-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776527170, "uuid": "b8c8ca2d-3b3d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://crims0n-path.to7vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776527181, "uuid": "bf7da821-3b3d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.146.90:53177/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776527527, "uuid": "8d59c9ca-3b3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.110.170:36350/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776527654, "uuid": "d9803463-3b3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://l0c4l-phase.to7vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776527828, "uuid": "40d73704-3b3f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.18.108:33475/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776528070, "uuid": "d1353b22-3b3f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://plan-couri.to7vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776528492, "uuid": "cca0ad9f-3b40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ibjxfl.to7vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776529030, "uuid": "0d3b6f21-3b42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.238.26:41577/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776529032, "uuid": "0e68cb85-3b42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sfcbq.ky2mloren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776529395, "uuid": "e6f356f8-3b42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://r0ut-line.ky2mloren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776529651, "uuid": "7fad4859-3b43-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.171.206:37998/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776529704, "uuid": "9f47d6b3-3b43-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.82.204:38990/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776529874, "uuid": "0477af58-3b44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://runtimeport.ky2mloren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776529928, "uuid": "24b9aa76-3b44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.52.94:55155/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776530347, "uuid": "1e941531-3b45-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://spri5-grid.ky2mloren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776530366, "uuid": "29bf2018-3b45-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.205.35:52084/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776530827, "uuid": "3c7b2ed9-3b46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.238.26:41577/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776530837, "uuid": "4253ebfb-3b46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sollithum1.ky2mloren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776531147, "uuid": "fb5f37c9-3b46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.60.179.130:55164/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776531253, "uuid": "3a98c7e8-3b47-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kelforgeon.ky2mloren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776531730, "uuid": "57133ecc-3b48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.154.10:51080/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776531736, "uuid": "5a9a654d-3b48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://triggerclean.po9vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776531871, "uuid": "aae9374d-3b48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.88.30:57807/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776532027, "uuid": "07cd83dd-3b49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.234.150:55111/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776532027, "uuid": "07cd8b5a-3b49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.154.10:51080/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776532266, "uuid": "967bcf5b-3b49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wcq78s.po9vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776532406, "uuid": "e9c85054-3b49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.60.179.130:55164/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776532693, "uuid": "94c12e1a-3b4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://53xs2msk.po9vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776532754, "uuid": "b9605aa1-3b4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.88.30:57807/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776533001, "uuid": "4c944919-3b4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.64.38:36313/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776533113, "uuid": "8f662f9c-3b4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://isy00.po9vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776533242, "uuid": "dc242a9a-3b4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.143.17:35279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776533599, "uuid": "b0aa5801-3b4c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://glacierfocu.po9vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776533604, "uuid": "b3bd2d48-3b4c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.255.237:45797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776534071, "uuid": "ca5fbce5-3b4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://7skoub.po9vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776534321, "uuid": "5edbcaa9-3b4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.63.164:56596/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776534494, "uuid": "c6125bce-3b4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://c0rt3x-spool.wi4msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776534504, "uuid": "cc6f5d95-3b4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.63.164:56596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776534802, "uuid": "7de29dc5-3b4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.67.33:47120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776534859, "uuid": "9fab29d1-3b4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.133.46.171:44076/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776534971, "uuid": "e2c959c8-3b4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://socialplai.wi4msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776535052, "uuid": "1290ba7b-3b50-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.171.192:48323/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776535389, "uuid": "dbf14618-3b50-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ts70.wi4msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776535873, "uuid": "fc25410b-3b51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vorfluxor5.wi4msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776536174, "uuid": "afb6ede7-3b52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.67.33:47120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776536289, "uuid": "f3f4a8c4-3b52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://merdra7ix.wi4msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776536361, "uuid": "1f3616db-3b53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.171.192:48323/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776536528, "uuid": "8277ab5d-3b53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.52.94:55155/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776536528, "uuid": "82ad9aac-3b53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.215.87:43772/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776536767, "uuid": "111f66b0-3b54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://c0urie-dock.wi4msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776537309, "uuid": "5426c001-3b55-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://scannergarden.de1xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776537727, "uuid": "4d765c6d-3b56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.215.87:43772/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776537734, "uuid": "51433c1a-3b56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zjpd.de1xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776538027, "uuid": "000e557d-3b57-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.168.90:49879/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776538208, "uuid": "6be27fd8-3b57-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl9p.de1xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776538333, "uuid": "b6566a67-3b57-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.49.83:49912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776538401, "uuid": "df365682-3b57-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.249.222:58496/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776538571, "uuid": "4421fb65-3b58-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://edimor.de1xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776538690, "uuid": "8b6ace9f-3b58-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.200.103:39367/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776539110, "uuid": "857b39c8-3b59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://balanmeadow.de1xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776539121, "uuid": "8c2921b2-3b59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.108.24:37866/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776539123, "uuid": "8d2d455b-3b59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.243.168:48355/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776539527, "uuid": "7de0cd5f-3b5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.168.90:49879/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776539527, "uuid": "7df5ab53-3b5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.158.237:45907/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776539588, "uuid": "a2612b7d-3b5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sermesh7ex.de1xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776539716, "uuid": "ef152c1b-3b5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.222.59.209:43199/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776539836, "uuid": "365bd7a7-3b5b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.51:44824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776540012, "uuid": "9ef89c6f-3b5b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lpxkdb6.bovlare6n.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776540078, "uuid": "c6712cd2-3b5b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.108.24:37866/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776540078, "uuid": "c6b4a447-3b5b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.55.173:54725/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776540486, "uuid": "b9fa7f61-3b5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://proto-5cree.bovlare6n.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776540793, "uuid": "70968e7a-3b5d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.157.252.60:41471/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776540968, "uuid": "d8ebbebc-3b5d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://1jec49.bovlare6n.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776541281, "uuid": "93a563a2-3b5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.184.36:39972/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776541447, "uuid": "f66b70ca-3b5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cleanprice.bovlare6n.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776541452, "uuid": "f9c5d5ce-3b5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.51:44824/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776541633, "uuid": "65b202c5-3b5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.200.103:39367/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776541868, "uuid": "f1684dba-3b5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://frame-inn.bovlare6n.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776542170, "uuid": "a5908e6f-3b60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.157.252.60:41471/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776542170, "uuid": "a5c31fee-3b60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.146.0:42849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776542288, "uuid": "ebd21462-3b60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quorforge3et.bovlare6n.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776542352, "uuid": "1215707d-3b61-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.55.173:54725/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776542769, "uuid": "0aa2850e-3b62-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tritideex2.qi8morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776543189, "uuid": "050e853e-3b63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://voltdesign.qi8morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776543197, "uuid": "099ba6d8-3b63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.157.55:46743/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776543427, "uuid": "928d093c-3b63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.24.140:35009/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776543430, "uuid": "94a80bda-3b63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.250.193:57817/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776543559, "uuid": "e176a6ec-3b63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.89.212:57930/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776543668, "uuid": "2290f6b0-3b64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quorvenar4.qi8morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776544088, "uuid": "1cca4e37-3b65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sand-visua.qi8morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776544152, "uuid": "43120de0-3b65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.151.196:59139/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776544568, "uuid": "3afbaaed-3b66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rnerge-field.qi8morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776544820, "uuid": "d1466338-3b66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.184.26:47757/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776544927, "uuid": "110cea06-3b67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.136.207:53134/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776544933, "uuid": "147c265f-3b67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.228.146:57103/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776544934, "uuid": "14e9c3d1-3b67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.135.164:47012/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776545046, "uuid": "57c1006f-3b67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://castsynt.qi8morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776545237, "uuid": "c98a23f5-3b67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.137.87:54550/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776545532, "uuid": "793882b2-3b68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ubyzw.5zoramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776545598, "uuid": "a0c2d12a-3b68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.227.210:49002/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776545838, "uuid": "30102dc3-3b69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.30.17:44165/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776545951, "uuid": "735b71a3-3b69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ggsf.5zoramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776546014, "uuid": "9897a2d2-3b69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.4.65.159:57091/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776546139, "uuid": "e302622e-3b69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.193.170:41115/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776546426, "uuid": "8e30888c-3b6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.136.207:53134/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776546431, "uuid": "910f77f0-3b6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://temp-enc.5zoramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776546728, "uuid": "42094e70-3b6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.231.137:46938/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776546747, "uuid": "4db166a7-3b6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.238.101.44:44128/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776546748, "uuid": "4e002375-3b6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.238.101.44:44128/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776546909, "uuid": "adfcfcd4-3b6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynnex4on.5zoramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776546917, "uuid": "b3273b64-3b6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.137.87:54550/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776547034, "uuid": "f8e1227e-3b6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.77.55:48956/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776547152, "uuid": "3ee5be59-3b6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.108.211:45747/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776547211, "uuid": "624a7b5f-3b6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.9.222:57297/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776547328, "uuid": "a804d94e-3b6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.211.249:55738/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776547333, "uuid": "aac6770e-3b6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ledgerinn.5zoramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776547509, "uuid": "13ea27b7-3b6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.147.163:40481/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776547581, "uuid": "3ef63ab9-3b6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.4.65.159:57091/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776547812, "uuid": "c8445622-3b6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://freightframe.5zoramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776548239, "uuid": "c6da32e9-3b6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.229.159:37697/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776548240, "uuid": "c75e6435-3b6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.157.175:40022/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776548289, "uuid": "e4d9c390-3b6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://k28gzwh.raxmi8vel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776548481, "uuid": "571480a4-3b6f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.66.181:50868/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776548542, "uuid": "7bb1cb97-3b6f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.108.211:45747/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776548719, "uuid": "e52712e0-3b6f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.193.170:41115/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776548720, "uuid": "e58fdac3-3b6f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.255.129:42139/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776548768, "uuid": "026951d5-3b70-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5un-lab.raxmi8vel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776549187, "uuid": "fc11a859-3b70-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vbaw.raxmi8vel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776549616, "uuid": "fba570b5-3b71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fcjcbzp.raxmi8vel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776549909, "uuid": "aa38ce9f-3b72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.157.175:40022/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776550029, "uuid": "f2246725-3b72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.168.128.146:41013/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776550036, "uuid": "f5c346f5-3b72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.11.248.133:40811/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776550036, "uuid": "f5f1d16e-3b72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.180.56.203:59787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776550154, "uuid": "3c8cc9d3-3b73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.255.129:42139/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776550390, "uuid": "c934a54f-3b73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://auditcove.raxmi8vel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776550573, "uuid": "35e58f2c-3b74-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://p4rce9-loop.raxmi8vel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776550574, "uuid": "366d7ff5-3b74-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.71.31.7:48002/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776550637, "uuid": "5c2684dc-3b74-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.66.181:50868/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776550808, "uuid": "c2736ccf-3b74-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5503.sylo7den.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776550879, "uuid": "ec9f90cc-3b74-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.80.59:40184/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776551001, "uuid": "357dfc56-3b75-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.166.41.200:52321/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776551169, "uuid": "999e518c-3b75-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://n662mc07.sylo7den.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776551177, "uuid": "9ddf92de-3b75-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.83.2.247:50833/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776551308, "uuid": "ec67a5d7-3b75-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.236.102:46951/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776551350, "uuid": "0562dbb0-3b76-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.162.241:43253/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776551362, "uuid": "0c4286ee-3b76-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.40.215:45481/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776551414, "uuid": "2ba9954f-3b76-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qu3ue-leaf.sylo7den.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776551474, "uuid": "4f5961d7-3b76-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.171.206:37998/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776551771, "uuid": "004a3eb7-3b77-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.180.56.203:59787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776552073, "uuid": "b45832b3-3b77-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://azcqv.sylo7den.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776552251, "uuid": "1e5089c6-3b78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nzhfxgcc.sylo7den.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776552327, "uuid": "4b7bcb15-3b78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.234.221:35134/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776552327, "uuid": "4bc03746-3b78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.234.221:35134/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776552433, "uuid": "8ac30a5d-3b78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://f335e.sylo7den.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776552502, "uuid": "b40daaf3-3b78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.23.223:42073/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776552788, "uuid": "5e8a8117-3b79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://threa-moon.to9varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776552803, "uuid": "674586ac-3b79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/hiddenbin/Space.x86_64", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776552920, "uuid": "ad11feed-3b79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.166.41.200:52321/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776552967, "uuid": "c94690ad-3b79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.47.188:56925/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776552968, "uuid": "c9be7284-3b79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.244.41:36938/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776553149, "uuid": "353cb717-3b7a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://windsystem.to9varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776553224, "uuid": "625ee6b6-3b7a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.40.215:45481/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776553453, "uuid": "eae42186-3b7a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geyserlab.to9varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776553463, "uuid": "f06035dd-3b7a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.162.241:43253/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776553809, "uuid": "bedca673-3b7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arklithix.to9varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776553887, "uuid": "ed534332-3b7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.23.223:42073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776554110, "uuid": "72141741-3b7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://s0rt3-frame.to9varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776554228, "uuid": "b891ba74-3b7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.192.170:35563/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776554422, "uuid": "2c177705-3b7d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.67.33.209:45468/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776554475, "uuid": "4c0c63ba-3b7d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://forrna9-watch.to9varem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776554543, "uuid": "744c3fd7-3b7d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.67.33.209:45468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776554607, "uuid": "9a665aee-3b7d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.181.158.75:37410/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776554771, "uuid": "fc350c24-3b7d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://revifern.kym2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776555132, "uuid": "d3579d77-3b7e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://latti6-mesh.kym2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776555493, "uuid": "aad55082-3b7f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://packbind.kym2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776555743, "uuid": "3f7bd7cc-3b80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.244.41:36938/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776555853, "uuid": "813453e6-3b80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sapvial.kym2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776556056, "uuid": "fa2f3d23-3b80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.251.230.194:44279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776556149, "uuid": "31620c15-3b81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pineroute.kym2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776556328, "uuid": "9c1d5709-3b81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.193.143:44022/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776556453, "uuid": "e701359f-3b81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://oputo.kym2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497824, "uuid": "6564e09e-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.43.21.116", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493985, "uuid": "74c5afd0-3af0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.108.146.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776503945, "uuid": "a586aec2-3b07-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.50.71.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776505506, "uuid": "485b97fa-3b0b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.249.199.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776495124, "uuid": "1c2c0cf9-3af3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.102.151", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776495124, "uuid": "1c2c1f50-3af3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.152.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776512884, "uuid": "75e8fbb1-3b1c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.76.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776489064, "uuid": "ffdde853-3ae4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.233.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776543424, "uuid": "90e6a825-3b63-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.250.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776479705, "uuid": "35a1b88f-3acf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.226.10.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776546007, "uuid": "9490862e-3b69-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.4.65.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776543424, "uuid": "90e6af9b-3b63-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.24.140", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776513307, "uuid": "71905514-3b1d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.27.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776527825, "uuid": "3f027580-3b3f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.18.108", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776548706, "uuid": "dd5e801f-3b6f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.39.255.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776477125, "uuid": "33758cf7-3ac9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.249.211.72", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776546725, "uuid": "40466d74-3b6b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.238.101.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776556025, "uuid": "e7ee182a-3b80-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.251.230.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776499984, "uuid": "6ca8c4b4-3afe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.26.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776544144, "uuid": "3e61ea2b-3b65-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.151.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776539107, "uuid": "8398df14-3b59-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.108.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485225, "uuid": "0f89de91-3adc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.230.93.100", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492785, "uuid": "a9905aa0-3aed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.228.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776477725, "uuid": "9946b950-3aca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.105.172", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776498185, "uuid": "3c6cca73-3afa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.248.19.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776552485, "uuid": "a9e2ca98-3b78-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.23.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776514685, "uuid": "a72e1200-3b20-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.4.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776514925, "uuid": "3684ae7d-3b21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.227.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493624, "uuid": "9db946d9-3aef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.25.89", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776509045, "uuid": "85a1c156-3b13-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.216.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487685, "uuid": "c9d5021d-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.173.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476825, "uuid": "80a8c7fc-3ac8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.198.133", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776509346, "uuid": "391e6429-3b14-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.199.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776551344, "uuid": "01e650fb-3b76-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.162.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776525125, "uuid": "f5d0e3f6-3b38-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.157.39", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776510724, "uuid": "6e50763b-3b17-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.4.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776500284, "uuid": "1f9e60db-3aff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.15.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502625, "uuid": "92eb9695-3b04-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.47.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776529925, "uuid": "232b925a-3b44-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.52.94", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776550986, "uuid": "2c38904d-3b75-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.166.41.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497945, "uuid": "ad8c99ba-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.167.2.100", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776539107, "uuid": "839bd13a-3b59-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.243.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776554225, "uuid": "b6dc5013-3b7c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.187.192.170", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497884, "uuid": "88f3feb7-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.187.59.136", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497945, "uuid": "ad8b720b-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.226.238.62", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497884, "uuid": "88f18330-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.176.39", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776507425, "uuid": "bfb50155-3b0f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.237.235", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776501007, "uuid": "ce5bed2b-3b00-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.51.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776473825, "uuid": "84b92535-3ac1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.12.187", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497884, "uuid": "88f97ca3-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.74.162", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497945, "uuid": "ad8b9b1a-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.39.253", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497824, "uuid": "6563a151-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.130.166.202", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776527165, "uuid": "b600ea25-3b3d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.132.146.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776548225, "uuid": "be910d05-3b6e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.157.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776531845, "uuid": "9b52a80b-3b48-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.88.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497884, "uuid": "88f2b2ed-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.86.106", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497824, "uuid": "656480ae-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.234.90.144", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776544925, "uuid": "0f9cded9-3b67-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.135.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776480424, "uuid": "e1e19837-3ad0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.253.209", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776531728, "uuid": "55784231-3b48-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.154.10", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776473825, "uuid": "84ba12e0-3ac1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.154.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776545584, "uuid": "98aa5093-3b68-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.227.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776545825, "uuid": "2803b21b-3b69-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.30.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776520565, "uuid": "57d4073d-3b2e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.42.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776534845, "uuid": "97513432-3b4f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.133.46.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497165, "uuid": "dc538284-3af7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.160.191.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776470764, "uuid": "64598c0a-3aba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.122.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776525907, "uuid": "c7e7e015-3b3a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.9.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497884, "uuid": "88f19412-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.141.21", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776524224, "uuid": "dd2652d9-3b36-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.169.214", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776524224, "uuid": "dd275064-3b36-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.6.169", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776552965, "uuid": "c7b55160-3b79-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.244.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776481324, "uuid": "fab01758-3ad2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.46.134.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776523924, "uuid": "2a350683-3b36-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.46.221.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776490206, "uuid": "a8ccf2d8-3ae7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.157.18.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497824, "uuid": "6564fbf5-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "140.237.6.248", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485825, "uuid": "7554bfdb-3add-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "156.229.165.225", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "nc", "colour": "#87EA4E", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776519008, "uuid": "b7b3a6f2-3b2a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "161.97.173.12", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776509045, "uuid": "85a1d4ff-3b13-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.36.118.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497945, "uuid": "ad9ac769-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.38.79.118", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497824, "uuid": "6562da17-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.81.103.95", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776473825, "uuid": "84bad931-3ac1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.18.219", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776551285, "uuid": "dea66032-3b75-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.236.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497824, "uuid": "6563d8b9-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.151.227.23", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776533585, "uuid": "a8baf1d7-3b4c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.151.255.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776481207, "uuid": "b4745c4d-3ad2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.166.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776474124, "uuid": "370caf5c-3ac2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.30.79.99", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483244, "uuid": "72fffdca-3ad7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.118.209.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776524885, "uuid": "669980ee-3b38-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.115", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485585, "uuid": "e635e48c-3adc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.148.173.ptr.pfcloud.network" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776507125, "uuid": "0cf5df1b-3b0f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "179.49.213.85", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776540785, "uuid": "6c30db0d-3b5d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.157.252.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776550025, "uuid": "ef312ac5-3b72-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.180.56.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776538684, "uuid": "87f13234-3b58-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.200.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497945, "uuid": "ad8b2cdc-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.197.0", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776501063, "uuid": "efff89d8-3b00-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.10.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497824, "uuid": "65672f45-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.94.186", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493565, "uuid": "7a815f74-3aef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.114.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776524465, "uuid": "6cb5eef3-3b37-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.253.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776544925, "uuid": "0f9d48dd-3b67-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.136.207", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492065, "uuid": "fce0a0f2-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.253.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497945, "uuid": "ad9a9c77-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.221.88", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776547506, "uuid": "11bdfd3c-3b6d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.147.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497824, "uuid": "65628ecd-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.190.55", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776540065, "uuid": "bee2148f-3b5b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.55.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497884, "uuid": "88f1ce1f-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.184.149.21", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502685, "uuid": "b6e66cf8-3b04-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.218.194.106", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502625, "uuid": "92eb3a7e-3b04-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.109.200.254", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502685, "uuid": "b6e70cc1-3b04-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "194.110.247.62", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776525366, "uuid": "85b62b1f-3b39-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "1e4r-span.sylo3rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776540965, "uuid": "d712b02d-3b5d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "1jec49.bovlare6n.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502686, "uuid": "b6f955cf-3b04-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.26.103.215", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776515825, "uuid": "4e9c1cee-3b23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.107.97.72", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476525, "uuid": "cde82e3b-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "213.67.213.82", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776550025, "uuid": "ef3147d1-3b72-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "217.168.128.146", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776488645, "uuid": "06086107-3ae4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "217.60.61.176", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776531125, "uuid": "ee6901b3-3b46-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.60.179.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776520324, "uuid": "c89199a9-3b2d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.224.101", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497945, "uuid": "ad998c42-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.253.184", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776552307, "uuid": "3f6274c0-3b78-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.234.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776473825, "uuid": "84b95ace-3ac1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.59.9", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776486065, "uuid": "0480c0bc-3ade-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.202.66.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776473825, "uuid": "84bab91a-3ac1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.202.89.244", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497884, "uuid": "88f173aa-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.17.198", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776529627, "uuid": "71120a96-3b43-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.171.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497824, "uuid": "6567288c-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.212.104.146", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776477365, "uuid": "c29c8a1b-3ac9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.145.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497884, "uuid": "88f86de7-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.235.128", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776484025, "uuid": "4439231b-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.184.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497945, "uuid": "ad8afcef-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.195.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776488765, "uuid": "4d8c6cd2-3ae4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.10.45.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776550025, "uuid": "ef3105ef-3b72-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.11.248.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497884, "uuid": "88f956f2-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.12.40.94", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776522665, "uuid": "3bb09122-3b33-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.161.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776527525, "uuid": "8c28660d-3b3e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.110.170", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502085, "uuid": "50b5d8de-3b03-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.114.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776520266, "uuid": "a5f6837b-3b2d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "2gxb0vyl.8zorelin.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776520925, "uuid": "2eb805ce-3b2f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.71.31.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497824, "uuid": "6564bd7e-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.52.242.125", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776518045, "uuid": "79b21084-3b28-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.67.103.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776481265, "uuid": "d791411b-3ad2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.60.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776547145, "uuid": "3ac40d30-3b6c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.108.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497945, "uuid": "ad8ad291-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.35.106", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776505325, "uuid": "dc04a24f-3b0a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.59.177", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776501666, "uuid": "5718015a-3b02-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.81.89.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776484025, "uuid": "4438e235-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.83.2.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776504725, "uuid": "768f8a06-3b09-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.89.164.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776522126, "uuid": "fa36957f-3b31-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "3wteeo.ra5xovel.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776501666, "uuid": "571719bd-3b02-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.25.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485825, "uuid": "7555c909-3add-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.82.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497945, "uuid": "ad8b013a-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.242.55", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776482223, "uuid": "1262f1ba-3ad5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.68.198", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776539524, "uuid": "7c9a4a48-3b5a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.158.237", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526506, "uuid": "2d058a88-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.216.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776500825, "uuid": "621212f6-3b00-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.197.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776546725, "uuid": "4046a0c5-3b6b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.231.137", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497945, "uuid": "ad8e5211-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.85.194", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776542164, "uuid": "a1d306f4-3b60-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.146.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776499085, "uuid": "549bb235-3afc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.42.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776475445, "uuid": "4a21ecd6-3ac5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.80.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776494225, "uuid": "041cfde9-3af1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.227.220", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497945, "uuid": "ad8bc5b7-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.243.140.215", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497945, "uuid": "ad98c39a-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.52.204.105", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776536526, "uuid": "81521c59-3b53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.215.87", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776475324, "uuid": "0247825e-3ac5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.119.20", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776496085, "uuid": "5902b514-3af5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.189.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776548465, "uuid": "4d991923-3b6f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.66.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497824, "uuid": "6562a95a-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.201.157.212", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497884, "uuid": "88f403ac-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.147.82.88", "Tag": [] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776518406, "uuid": "50f24020-3b29-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "52hb.8zorelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776532691, "uuid": "93528b50-3b4a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "53xs2msk.po9vtirel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776550806, "uuid": "c12c2554-3b74-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5503.sylo7den.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776513245, "uuid": "4cd524f3-3b1d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.54.52.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776538385, "uuid": "d552408d-3b57-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.249.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776548766, "uuid": "0146ab26-3b70-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5un-lab.raxmi8vel.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776520626, "uuid": "7c0a38dc-3b2e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.51.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497945, "uuid": "ad8b5492-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.211.44.179", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776473825, "uuid": "84bac849-3ac1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.215.17.250", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776478565, "uuid": "8dfad9c0-3acc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.193.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776477725, "uuid": "9946ce02-3aca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.219.85", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776508028, "uuid": "270c4bff-3b11-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.80.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497824, "uuid": "6564c7d0-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.90.174", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776521464, "uuid": "6f923c9f-3b30-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.149.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776546124, "uuid": "da912a62-3b69-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.193.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497884, "uuid": "88f14f96-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.198.34", "Tag": [] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776524885, "uuid": "66c4734b-3b38-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "6a00327.sylo3rex.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776475625, "uuid": "b590bf75-3ac5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "79.106.45.20", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776534066, "uuid": "c70be310-3b4d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "7skoub.po9vtirel.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476224, "uuid": "1a937585-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.11.167.21", "Tag": [ { "name": "85-11-167-21", "colour": "#1df840", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483905, "uuid": "fcb44940-3ad8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.103.188.207", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497286, "uuid": "24c50be4-3af8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "air-flight4.sy7loden.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485645, "uuid": "09c4a6e5-3add-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "apple-pie2.bovdalen7.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776553806, "uuid": "bd66cdd4-3b7b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arklithix.to9varem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776471365, "uuid": "caa36841-3abb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "art-studio1.tovdo9ral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776517865, "uuid": "0ec97f4b-3b28-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "asdf.qimor6xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526266, "uuid": "9db5d864-3b3b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "atom0-bridge.to7vamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776550387, "uuid": "c7202430-3b73-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "auditcove.raxmi8vel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476825, "uuid": "80b16ab8-3ac8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "auto-care1.povt8aren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776552071, "uuid": "b30257f5-3b77-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "azcqv.sylo7den.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776539107, "uuid": "83bd4175-3b59-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "balanmeadow.de1xpamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776516726, "uuid": "67a1e0da-3b25-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-deal5.qimor6xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776512585, "uuid": "c39b2000-3b1b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-food2.bov7larex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776507547, "uuid": "086d496c-3b10-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-score3.wi5msorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776480063, "uuid": "0ad004bd-3ad0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-cloud2.wimso4rel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776506465, "uuid": "839e671f-3b0d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-lake6.po9vtaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776521649, "uuid": "de1f83e9-3b30-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bluhz.ra5xovel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776489726, "uuid": "8aa49e88-3ae6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "boat-tour5.qi5mlixar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776473227, "uuid": "207bb54f-3ac0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "book-shelf5.tovdo9ral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776497708, "uuid": "20202e1c-3af9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "box-pack5.sy7loden.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776521165, "uuid": "bdc6d1be-3b2f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "broker-plate.ra5xovel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776534491, "uuid": "c46a99c5-3b4e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "c0rt3x-spool.wi4msaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776536765, "uuid": "0fd3d39d-3b54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "c0urie-dock.wi4msaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776526744, "uuid": "bb11da5e-3b3c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "c4rry-index.to7vamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776478265, "uuid": "daf34d17-3acb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "car-wash4.povt8aren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776545044, "uuid": "56925cdb-3b67-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "castsynt.qi8morlen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776490624, "uuid": "a1f2218d-3ae8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "central-park1.4zomiren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776472744, "uuid": "0080597d-3abf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cinema-club4.tovdo9ral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776491470, "uuid": "99b3cd21-3aea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "city-tower3.4zomiren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487929, "uuid": "5b925e9b-3ae2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clean-sea1.qi5mlixar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776503707, "uuid": "180de359-3b07-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clean-tech6.kymli2rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776541444, "uuid": "f50ea017-3b5e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cleanprice.bovlare6n.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776484687, "uuid": "cec4b81c-3ada-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cloud-node6.dexpor1el.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776512047, "uuid": "8290c4c7-3b1a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cnpaintequipment.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776505808, "uuid": "fc1f3774-3b0b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cold-ice5.po9vtaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776486490, "uuid": "01d0d4bd-3adf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cool-milk4.bovdalen7.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776513971, "uuid": "fdd0bc93-3b1e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cool-mint5.bov7larex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776527165, "uuid": "b61d9afc-3b3d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "crims0n-path.to7vamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776472264, "uuid": "e2962c77-3abd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dance-floor3.tovdo9ral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776484145, "uuid": "8bad406f-3ad9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-base5.dexpor1el.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776504368, "uuid": "a1bd9834-3b08-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deep-sea2.po9vtaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776538205, "uuid": "6a5fb7d8-3b57-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dl9p.de1xpamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776546906, "uuid": "ac386d5d-3b6b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dynnex4on.5zoramel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502745, "uuid": "da860729-3b04-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "eco-power4.kymli2rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776538565, "uuid": "40f0bfe8-3b58-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "edimor.de1xpamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776552430, "uuid": "89005afc-3b78-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "f335e.sylo7den.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776495905, "uuid": "ed9b56c9-3af4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-cargo1.sy7loden.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483727, "uuid": "92f59b3e-3ad8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-code4.dexpor1el.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776478985, "uuid": "883887ab-3acd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-drive5.povt8aren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776508033, "uuid": "2a5e0c91-3b11-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-move4.wi5msorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776549608, "uuid": "f6cdb9b3-3b71-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fcjcbzp.raxmi8vel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776499566, "uuid": "7357367c-3afd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "film-edit3.to3varem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776554473, "uuid": "4add5d28-3b7d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "forrna9-watch.to9varem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776541864, "uuid": "ef5d87e5-3b5f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "frame-inn.bovlare6n.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776547808, "uuid": "c5e5f7dc-3b6d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "freightframe.5zoramel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776485106, "uuid": "c8c748e9-3adb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fruit-box1.bovdalen7.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776506646, "uuid": "ef595594-3b0d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "game-mode1.wi5msorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776520751, "uuid": "c7155601-3b2e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-via1.ra5xovel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776553450, "uuid": "e8c76a4e-3b7a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geyserlab.to9varem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776545949, "uuid": "71eea15e-3b69-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ggsf.5zoramel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776515765, "uuid": "2af2d715-3b23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gift-item3.qimor6xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776533592, "uuid": "ac85913d-3b4c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "glacierfocu.po9vtirel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776470825, "uuid": "889545a2-3aba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "global-tax6.sylpi6ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776502265, "uuid": "bc901a8c-3b03-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "green-heat3.kymli2rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776475925, "uuid": "682e2310-3ac6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "green-plant5.k2ymlirem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493387, "uuid": "104aaa8c-3aef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hand-tool1.rax8mivel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776496324, "uuid": "e7417795-3af5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "heavy-truck2.sy7loden.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776488650, "uuid": "094a5e30-3ae4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hey-release.s3.us-east-2.amazonaws.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776504845, "uuid": "be2c4985-3b09-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "high-hill3.po9vtaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776473644, "uuid": "18fca8d3-3ac1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hobby-time6.tovdo9ral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776512046, "uuid": "8246e510-3b1a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "home-chef1.bov7larex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776474066, "uuid": "145153df-3ac2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "home-style1.k2ymlirem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776513490, "uuid": "dee0b8f3-3b1d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hot-grill4.bov7larex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776486967, "uuid": "1dcdd1aa-3ae0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hot-soup5.bovdalen7.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776528487, "uuid": "c9de517d-3b40-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ibjxfl.to7vamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776511992, "uuid": "61e75fa6-3b1a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "insureongo.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776489248, "uuid": "6d72920c-3ae5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "island-trip4.qi5mlixar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776533111, "uuid": "8dab415b-3b4b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "isy00.po9vtirel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776548286, "uuid": "e2b9f946-3b6e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "k28gzwh.raxmi8vel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776531250, "uuid": "38d8ecaf-3b47-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kelforgeon.ky2mloren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776527647, "uuid": "d52554b4-3b3e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "l0c4l-phase.to7vamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776555127, "uuid": "d0655806-3b7e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "latti6-mesh.kym2lirex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776518891, "uuid": "7226e5aa-3b2a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "layoutcrawle.8zorelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776547330, "uuid": "a94cfe13-3b6c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ledgerinn.5zoramel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776500885, "uuid": "85a8d94d-3b00-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "live-feed6.to3varem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776517146, "uuid": "61f6fddc-3b26-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "low-cost6.qimor6xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776517685, "uuid": "a36e7925-3b27-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lowa.qimor6xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776540007, "uuid": "9c8889c7-3b5b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lpxkdb6.bovlare6n.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492187, "uuid": "4539bafd-3aec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-bridge5.4zomiren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776500406, "uuid": "681b4368-3aff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "media-link5.to3varem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776525788, "uuid": "80cf1ebe-3b3a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mer-draet.sylo3rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776536285, "uuid": "f1df51ed-3b52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "merdra7ix.wi4msaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776494526, "uuid": "b73bb416-3af1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "metal-bolt4.rax8mivel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776491045, "uuid": "9ce244d2-3ae9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "metro-station2.4zomiren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776474607, "uuid": "56ad30ef-3ac3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "modern-room2.k2ymlirem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776472084, "uuid": "772e0976-3abd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "music-band2.tovdo9ral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776551167, "uuid": "983ff168-3b75-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "n662mc07.sylo7den.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776508930, "uuid": "41284450-3b13-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "new-level6.wi5msorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776516245, "uuid": "491bec76-3b24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "new-stock4.qimor6xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776477786, "uuid": "bd6dac5f-3aca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "new-tires3.povt8aren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776509829, "uuid": "58950c5b-3b15-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "news-feed2.de8xporel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776492605, "uuid": "3eb1365f-3aed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "night-road6.4zomiren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776552245, "uuid": "1aa50453-3b78-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nzhfxgcc.sylo7den.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776477365, "uuid": "c2a5c540-3ac9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "oil-change2.povt8aren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776505325, "uuid": "dc164a41-3b0a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-field4.po9vtaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776476344, "uuid": "623f5803-3ac7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-window6.k2ymlirem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776556450, "uuid": "e4fa5ce5-3b81-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "oputo.kym2lirex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776550564, "uuid": "30bb82ec-3b74-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "p4rce9-loop.raxmi8vel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776555490, "uuid": "a891d4f3-3b7f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "packbind.kym2lirex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776511630, "uuid": "8a308c4d-3b19-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "page-link6.de8xporel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776488765, "uuid": "4d948cc0-3ae4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "palm-tree3.qi5mlixar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776499984, "uuid": "6cad8e10-3afe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "photo-shot4.to3varem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776556145, "uuid": "2f6faf0b-3b81-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pineroute.kym2lirex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776528008, "uuid": "ac1af658-3b3f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "plan-couri.to7vamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776510306, "uuid": "74f61ec0-3b16-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "post-card3.de8xporel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776493565, "uuid": "7a8ea787-3aef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "power-drill2.rax8mivel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776540484, "uuid": "b8c14697-3b5c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "proto-5cree.bovlare6n.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776503226, "uuid": "f90b974b-3b05-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pure-energy5.kymli2rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776551412, "uuid": "2a5b1561-3b76-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qu3ue-leaf.sylo7den.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776542285, "uuid": "e9dfa8e2-3b60-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quorforge3et.bovlare6n.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776543666, "uuid": "21202c4f-3b64-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quorvenar4.qi8morlen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776529386, "uuid": "e1ca17e5-3b42-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "r0ut-line.ky2mloren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776480964, "uuid": "241ae99f-3ad2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rain-drop4.wimso4rel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776554768, "uuid": "fa4c00af-3b7d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "revifern.kym2lirex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776544565, "uuid": "39033dc6-3b66-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rnerge-field.qi8morlen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776479167, "uuid": "f4a5c3d2-3acd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "road-trip6.povt8aren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776529871, "uuid": "02802ad0-3b44-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "runtimeport.ky2mloren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776523445, "uuid": "0cc812cd-3b35-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rwwolv22.sylo3rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776554107, "uuid": "709e3654-3b7c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "s0rt3-frame.to9varem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776470407, "uuid": "8fa6a64f-3ab9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "safe-invest5.sylpi6ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776515345, "uuid": "30cdb20c-3b22-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sale-price2.qimor6xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776488412, "uuid": "7b58690e-3ae3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sand-beach2.qi5mlixar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776544085, "uuid": "1acc20e2-3b65-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sand-visua.qi8morlen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776555850, "uuid": "7fb7e045-3b80-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sapvial.kym2lirex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776537306, "uuid": "52917eec-3b55-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "scannergarden.de1xpamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776539586, "uuid": "a11bbfd5-3b5a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sermesh7ex.de1xpamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776529027, "uuid": "0bcf65d6-3b42-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sfcbq.ky2mloren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776494047, "uuid": "99d15b6a-3af0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sharp-saw3.rax8mivel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776496745, "uuid": "e209fd99-3af6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ship-port3.sy7loden.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776490450, "uuid": "39e6662e-3ae8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ship-yard6.qi5mlixar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776514928, "uuid": "37d61853-3b21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shop-list1.qimor6xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776510663, "uuid": "49d28630-3b17-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "site-map4.de8xporel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776479584, "uuid": "ed54827f-3ace-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sky-view1.wimso4rel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483065, "uuid": "08167f1a-3ad7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "smart-app2.dexpor1el.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776481507, "uuid": "674d589e-3ad3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "snow-fall5.wimso4rel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776534970, "uuid": "e1b2dd6b-3b4f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "socialplai.wi4msaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776475024, "uuid": "4f878a43-3ac4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-sofa3.k2ymlirem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776501366, "uuid": "a449bcc4-3b01-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "solar-light1.kymli2rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776530832, "uuid": "3fc96a27-3b46-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sollithum1.ky2mloren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776499085, "uuid": "54a63330-3afc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sound-mix2.to3varem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776530345, "uuid": "1d3d4db2-3b45-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "spri5-grid.ky2mloren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776519365, "uuid": "8cd8bf4a-3b2b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sri4.8zorelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776522965, "uuid": "eeb4d154-3b33-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stab7-sheet.ra5xovel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776498125, "uuid": "18aa3534-3afa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "store-house6.sy7loden.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776491766, "uuid": "4aad16e0-3aeb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "street-light4.4zomiren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776518045, "uuid": "79d0b970-3b28-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sub-the0.8zorelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776480547, "uuid": "2b123156-3ad1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sun-light3.wimso4rel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776486006, "uuid": "e0e578ca-3add-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sweet-cake3.bovdalen7.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776513065, "uuid": "e157ffb1-3b1c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sweet-pie3.bov7larex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776524408, "uuid": "4a524613-3b37-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sx9v1.sylo3rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776519847, "uuid": "ac3d4c12-3b2c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "talcoreos.8zorelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776487385, "uuid": "16fbb9f0-3ae1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tasty-bun6.bovdalen7.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776514387, "uuid": "f5d36d1a-3b1f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tasty-ham6.bov7larex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776508512, "uuid": "479b9913-3b12-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "team-win5.wi5msorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776482406, "uuid": "7fa06a50-3ad5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tech-tool1.dexpor1el.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776546424, "uuid": "8d448fa1-3b6a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "temp-enc.5zoramel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776552785, "uuid": "5c573cae-3b79-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "threa-moon.to9varem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776507065, "uuid": "e952aabd-3b0e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "top-play2.wi5msorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776531733, "uuid": "58bf688e-3b48-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "triggerclean.po9vtirel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776542765, "uuid": "08085e87-3b62-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tritideex2.qi8morlen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776535387, "uuid": "daa6a932-3b50-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ts70.wi4msaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776545527, "uuid": "7677d374-3b68-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ubyzw.5zoramel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776511206, "uuid": "8daaf5e4-3b18-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "user-info5.de8xporel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776549184, "uuid": "fa52a61c-3b70-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vbaw.raxmi8vel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776522545, "uuid": "f3e4a038-3b32-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "veldraex9.ra5xovel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776498606, "uuid": "37a17bbb-3afb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "video-clip1.to3varem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776543186, "uuid": "0351987b-3b63-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "voltdesign.qi8morlen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776535866, "uuid": "f7ce21af-3b51-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vorfluxor5.wi4msaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776475445, "uuid": "4a302345-3ac5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warm-light4.k2ymlirem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776523987, "uuid": "4f9aae73-3b36-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "watch-signal.sylo3rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776532264, "uuid": "95234513-3b49-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wcq78s.po9vtirel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776509412, "uuid": "605dae6d-3b14-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "web-blog1.de8xporel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776483545, "uuid": "26277282-3ad8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "web-site3.dexpor1el.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776504066, "uuid": "ed80d6dd-3b07-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wild-life1.po9vtaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776501845, "uuid": "c1a7debd-3b02-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wind-farm2.kymli2rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776481985, "uuid": "84330a4c-3ad4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wind-speed6.wimso4rel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776553144, "uuid": "32d070be-3b7a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "windsystem.to9varem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776495008, "uuid": "d6febef9-3af2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wood-glue5.rax8mivel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776495366, "uuid": "abf5296d-3af3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "work-bench6.rax8mivel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776511751, "uuid": "d215c1dd-3b19-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xrplnode.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776537730, "uuid": "4f18475c-3b56-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zjpd.de1xpamil.in.net" } ] } }